The compliance tag has no wiki summary.
0
votes
1answer
36 views
PCI Compliance Network Scan Issue - HTTP response code was an expected 401
We take Credit card over internet connected comupter, and we have to pass PCI compliance network scan. When I run network scan , I have the following error. How can i fix this error.
Any help ...
0
votes
0answers
46 views
Which product enforces NTFS permission compliance? [closed]
I have to enforce NTFS permissions based on business roles. Each role (group in ADS) can be granted the permission to read or write a file server directory. I have to ensure that the server ...
0
votes
0answers
17 views
Openfire/spark questions [duplicate]
Possible Duplicate:
Can you help me with my software licensing issue?
I am testing OpenFire chat server with the Spark client and had a few questions. I do a lot of work for medical ...
1
vote
2answers
82 views
How can I store logs and meet compliance requirements for free? [closed]
I am trying to keep long-term logs of an app in such a way, that it could plausibly demonstrated to third parties/court that the application has processed certain data at a given time. The data can ...
0
votes
0answers
37 views
Vunlerability auditing for network devices
I'm looking for a tool/software to cross-check my network device configs (Cisco, etc) against matching relevant vulnerability feeds. Therefore, if there is an SSH vulnerability in my Cisco IOS code ...
2
votes
1answer
523 views
Configuration Compliance auditing for many CentOS 5.x boxes
Current Situation
I have a client with many (200x) CentOS 5.x servers deployed in various web, mail, database and file server roles, and these boxes have been variously administrated to a lessor or ...
0
votes
1answer
54 views
Network Change Control & Compliance
I'm looking for a network change management & compliance audit tool, I know that SolarWinds and tufin are very know.
Do you have any experience that you can share regarding these two or other?
7
votes
1answer
696 views
Has anyone achieved Level 1 PCI compliance on AWS?
All the FAQs, documents and statements published by AWS aside, did any Level 1 merchant actually achieve PCI compliance on AWS yet? We're evaluating moving some of our services to EC2/VPC, but our ...
4
votes
4answers
357 views
Compliance/e-discovery - message and SMS text archiving
I work in the financial trading industry and have a forthcoming regulatory requirement to begin archiving electronic communications. This includes social media, instant messaging (e.g. AIM and Yahoo ...
1
vote
2answers
189 views
Email Archive Solution
I need recommendation for Email archive solution. We have setup hosting and email server on one of government enterprise where they need to store all incoming/outgoing emails for compliance and ...
1
vote
2answers
429 views
Email Approval Process On Exchange Server
Are there any tools out there that allow you to check a box (or something like that) and say that you want to subject a given email for approval. Then, once the email is approved, it goes to the ...
14
votes
7answers
520 views
Long-term storage of Business Critical data
This is a really tricky one, and to some extent it's not a technical problem, and might not belong here, but
Server Fault is for system
administrators ... who manage or
maintain computers in ...
0
votes
1answer
298 views
Is there a tool to check GPOs like MBSA?
I'd like to provide some background before I pose my question so please, bear with me.
I have come across Microsoft's Security Compliance Manager. It's rather new to me and as I understand so far, ...
1
vote
2answers
145 views
What are the internet standards for the CNAME record?
I'd like to know what internet standard defines the CNAME
2
votes
1answer
277 views
What are HIPAA rules concering RPO and RTO for a doctors office?
I am planning system upgrades at several Group Practice doctor offices.
I am asking them questions concerning what their RTO (Recovery Time Objective) and RPO (Recovery Point Objective) may be so ...
2
votes
6answers
1k views
what's the difference between PCI and SAS 70 compliance when I am shopping for a hosting company to stick my servers in?
I am looking for hosting, ec2 is SAS 70 compliant (almost) and I would have gone straight for PCI compliant and tier 4 only but I'm considering SAS 70. What are the differences or similarities?
2
votes
4answers
76 views
Media / Printed material needed for Upgrade Compliance? [duplicate]
Possible Duplicate:
Can you help me with my software licensing question?
If we are buying new or used Windows FPP (Retail), we make sure we keep the Media, EULA, Manual, and License. ...
6
votes
4answers
570 views
Backup is not Archiving - But what requirements does archiving have?
There's related thread on how to handle archiving. I'm asking on how to find the requirements in a company on the way archiving should be done, and also the requirements that need to be fullfilled so ...
4
votes
3answers
3k views
Are there any FIPS-140-2 certified solutions for Linux?
I'm not even 100% certain what this involves, but my current understanding is this:
use of only approved cryptographic algorithms for network traffic (easy, we use SSL and lock down the algorithms ...
