PCI for Hospitality Ensures Configuration Integrity for Hospitality Industry

Tripwire's Comprehensive, Quick-to-Deploy Solution Ensures Continuous Compliance From the Data Center to the Hotel

Tripwire, the industry leader in configuration control, today announced the availability of PCI for Hospitality, a solution tailored to help lodging establishments ensure continuous compliance with the Payment Card Industry Data Security Standard (PCI DSS). All lodging establishments -- regardless of size -- are required to comply with the PCI DSS, or face substantial financial costs and business consequences if they fail to comply. PCI is of particular relevance to hospitality, with 55 percent of credit card fraud cases originating in the hospitality industry -- and many security vulnerabilities originating on the actual hotel property. Breaches can occur at point-of-sale registers, front desk stations, self-serve kiosks and within the property management system.

PCI for Hospitality is a comprehensive, customized solution to help lodging establishments ensure continuous compliance with PCI requirements -- cost-effectively, and in time for rapidly approaching compliance deadlines. The solution is priced to meet the needs of hotels of all sizes and offers a PCI Foundations professional services engagement to tailor the software package to meet the unique environments of hotels, motels and resorts.

"Tripwire's expertise in ensuring continuous compliance is unparalleled," said Ed Rarick, PCI Evangelist at Tripwire. "Our solution ensures that hotel customers' data will be secure at all times -- and that lodging establishments will be able to ensure security and compliance in a cost-effective manner." Tripwire has extensive experience helping organizations implement configuration integrity, which is the foundation of PCI. Tripwire leverages industry standards and benchmarks, such as those set by the Center for Internet Security (CIS) to assess configurations and determine the degree of risk across 21 different environments.

Tripwire maintains file integrity for IT systems by continuously detecting and reporting unauthorized changes, including those caused by security breaches -- and since detecting change alone does not automatically reduce risk, Tripwire allows staff to determine whether a given change was expected, authorized and compliant. Tripwire alerts and reports the changes to appropriate staff so that they can be immediately investigated and resolved, using its automated remediation guidance. PCI for Hospitality enables hotels to keep compliance costs in check with economical per-hotel pricing. Tripwire's policies can be quickly and easily updated, and customers who purchase PCI for Hospitality can expect to be continuously compliant after each upgrade of the standard.

PCI for Hospitality includes Tripwire Enterprise, which addresses the configuration assessment and file integrity monitoring needs of corporate datacenter environments; Tripwire Enterprise for Hotels, which extends configuration integrity to in-hotel registers, servers and front-desk systems and PCI Foundation for Hotels, and a professional services offering to ensure a rapid and successful deployment.

To learn more, join the webcast, "What Every Hospitality and Food Service Organization Needs to Know About Protecting Cardholder Data."

About Tripwire, Inc.

Tripwire helps over 6,000 enterprises worldwide reduce security risk, attain compliance and increase operational efficiency across virtual and physical environments. With its industry leading configuration assessment and change auditing software solutions, IT organizations achieve and maintain configuration control. Tripwire is headquartered in Portland, Ore. with offices worldwide. http://www.tripwire.com/.

©2008, Tripwire, Inc. Tripwire is a registered trademark of Tripwire, Inc. All other marks are property of their respective owners. All rights reserved.