Vormetric Transparent Encryption will play an important role in the security of Borcia-Bankservice and enable: • Compliance with Payment Card Industry (PCI) Data Security Standard (DSS)
• Application, data, and user-level ?le access control
• Flexibility, with operating system independence
• Eradication of single points of exposure
Jointly owned by the Bulgarian National Bank and the country’s major commercial banks, Borica-Bankservice AD develops and maintains the primary IT infrastructure for the Bulgarian payment industry. It focuses on ensuring high-quality and innovative disbursement services for retail and card payment transactions. A component of this responsibility involves interfacing with global card providers, such as MasterCard, Visa, and American Express.
The company required a data encryption solution that not only enables PCI DSS compliance and protects in-house and third party applications and data, but also one that would enable it to accommodate any changes made to its environment without imposing restrictions on creativity. After evaluating a number of solutions against a structured set of measures, that included criteria in areas such as functionality, flexibility, ease of use and performance; Vormetric Transparent Encryption was chosen for implementation.
“We looked at a lot of different encryption-related solutions,” said Valeri Ivanov, head of information security for Borica Bankservice. “We evaluated each one against a very structured set of measures that included criteria in areas such as functionality, flexibility, ease of use, and performance. Our efforts culminated in a strong recommendation to purchase Vormetric Transparent Encryption.”
Vormetric Transparent Encryption enables data-at-rest encryption, file encryption, privileged user access control and the collection of security intelligence logs without re-engineering applications, databases or infrastructure. The deployment of Vormetric’s encryption software is simple, scalable and fast. Vormetric Transparent Encryption Agents are installed above the file system on servers or virtual machines to enforce security and compliance policies. “We tested many different products using a series of gigabyte files and saw zero degradation in response times or throughput with the Vormetric solution – nothing else even came close to this level of transparency,” added Ivanov.