First aid charity addresses PCI DSS with network monitoring solution

IT | Gareth Jones | 5 Jul 2010

St John Ambulance is tackling the Payment Card Industry Data Security Standard (PCI DSS) by implementing a new system designed to monitor the security performance of its network.

It chose a security information event management (SIEM) system from LogRhythm, a company which specialises in the collection, organisation, analysis, archival and recovery of log data.

The system will help the charity meet its obligations as a Level 3 PCI DSS merchant by collecting logs from various relevant components on the charity’s network, such as the firewall and workstations, and alerting on any unusual activity.

Previously the IT team collected log data manually which made analysis or investigation both time-consuming and more reactive than proactive.

“We evaluated a number of offerings but LogRhythm stood out as being more flexible and configurable than the others,” said Karl Heydenrych, IT director at St John Ambulance.

“Additionally, LogRhythm was the only solution we found which offered integrated file integrity monitoring.

“Not only would this negate the need for us to purchase an additional solution to meet the specific file integrity monitoring requirements of PCI DSS, but it would simplify and strengthen our security, audit and compliance processes.”

The LogRhythm system was provided by reseller Softcat and implemented by LogRhythm partner Vigil Software.

Having addressed the PCI DSS compliance issues, the charity now anticipates extending the use of the product across its entire IT estate.

Directory: St John Ambulance

Comments

[Cancel] | Reply to:

Name *

Email *

Organisation

Job Title

Comments *

Verification *

* Please read our Community Standards

Close »

Community Standards

The civilsociety.co.uk community and comments board is intended as a platform for informed and civilised debate.

We hope to encourage a broad range of views, however, there are standards that we expect commentators to uphold. We reserve the right to delete or amend any comments that do not adhere to these standards.

We welcome:

Robust but respectful debate
Strongly held opinions
Intelligent relevant discussion
The sharing of relevant experiences
New participants

We will not publish:

Rude, threatening, offensive, obscene or abusive language, or links to such material
Links to commercial organisations or spam postings. The comments board is not an advertising platform
The posting of contact details for yourself or others
Comments intended for malicious purpose or mindless abuse
Comments purporting to be from another person or organisation under false pretences
Gratuitous criticism, commentary or self-promotion
Any material which breaches copyright or privacy laws, or could be considered libellous
The use of the comments board for the pursuit or extension of personal disputes

Be aware:

Views expressed on the comments board are left at users’ discretion and are in no way views held or supported by Civil Society Media
Comments left by others may not be accurate, do not rely on them as fact
You may be misunderstood - sarcasm and humour can easily be taken out of context, try to be clear

Please:

Enjoy the opportunity to express your opinion and respect the right of others to express theirs
Confine your remarks to issues rather than personalities

Together we can keep our community a polite, respectful and intelligent platform for discussion.