Voltage Security
now hiring | contact | support VSN Login

Understanding Tokenization and End-to-End Encryption
Sponsored by: Financial Services Information Sharing and Analysis Center (FS-ISAC)
Featuring special guest expert - Branden R. Williams
, Director, PCI Practice, VeriSign, Global Security Consulting

View On-demand Webcast
You may have heard about the rising number of data breaches occurring in the industry. The disturbing fact is that 99% of current security solutions would not have prevented breaches at leading brand name companies. Why? Because current approaches to protecting sensitive data within your organization are difficult and expensive to implement and do not protect data end-to-end.  
Two techniques have emerged that may help protect sensitive information such as credit card numbers, Primary Account Numbers (PANs) and government tax identification numbers:  
In this webcast you’ll hear from subject matter experts on:
 
crypto
Tokenization – A non-cryptographic approach that replaces private data such as a PAN with a token that is then passed through the application and databases
 
crypto
Format-Preserving Encryption – A cryptographic approach that encrypts private data such as a PAN, in place, providing end-to-end encryption   
 
crypto
Reduction in audit scope– Hear PCI experts discuss how format-preserving encryption can reduce overall audit scope  
 

In understanding the systems that implement these data protection approaches it is important to compare them from the perspective of:
 
Complexity – complex systems cost more with higher ongoing operational costs and can often introduce new, unfamiliar risk dynamics
 
Audit – auditors looking at systems implemented with either technology need to establish risk
 
Cost – cost projections should be measured in terms of how long it takes to implement as well as ongoing operational requirements   
 
Risk – the question has to be asked, “Is the system more or less secure after implementation of these techniques?”   

Featured Speakers
Terence Spies - Voltage Security   Wasim Ahmad - Voltage Security   Branden Williams - VeriSign
Terence Spies   Wasim Ahmad   Branden Williams
Chief Technology Officer   VP of Marketing   Director of the PCI Practice
Voltage Security   Voltage Security   VeriSign, Global Security Practice


For any data protection project you must understand the underlying technologies that drive the solutions you are considering. Making an uninformed choice can create complicated consequences that could reach far into the future.
 
View On-demand Webcast