mailing list archives
Re: PCI, EFS and the future?
From: "Saqib Ali" <docbook.xml () gmail com>
Date: Fri, 2 Feb 2007 14:13:41 -0800
My gut feeling is telling me that EFS is the wrong solution and I fear
that it won't be in compliance with PCI's data at rest specs.
May I ask why you feel that EFS is the wrong solution? On the face, it
seems to satisfy all the PCI data storage encryption requirements ....
I will tell you more why EFS might not be a good idea, but I want to
hear your opinion first.
Here is some white-papers (disclaimer: they are self-serving, but
still good) that cover data storage requirements for PCI.
Also check out http://www.decru.com/