Info-Sage

Overview Belinda Mobley is a Business Analyst / Project Manager specializing in Cyber Security and PCI Compliance (Credit Card Processing) projects related to potential audits or security breaches. Don’t React, Re-Think The challenge for many small companies is that once a compliance issue arises there is no time to get a plan together before the need demands action. When the Network or IT Operations team recognizes an issue, their focus is to shut down the path of the breach. Therein lies the problem, these are network/operations professionals - not Business Stakeholders. Recognizing there is a problem and stopping the breach are not the same skills as managing the remediation effort for Business Continuity. Your company’s Strategic Planning and Remediation Strategies should include payment processing and security breach protocol that is designed to allow the Business to continue operations. Be Prepared When facing a breach or audit there are very specific documentation and log files that must delivered to the forensic/audit team. These artifacts are the only way your company has to discover the source of the breach and prove culpability. It is mandatory to have Policies and Procedures in place at all times for: • A secure environment for all transactions; • A plan for Forensic Assistance; • The correct Log Files, Network Diagrams, and Infrastructure Diagrams up to date and available; • Monitoring of Secure Environments; • Accountability for Administrators; • Security Awareness and Training; • Repeal unsecure payment methods; • A plan for Business Continuity. Pro-action Now Leads To the ABILITY to React Later. Security Scans and Network Penetration testing are already NIST recommendations, but they are PCI Compliance requirements.