Security Assessment of Extended Enterprises Made Easier With Enhanced Verizon Business Partner Security Program

Enhancements Help Companies Address Challenging Security Requirements

Extended enterprises can now better assess and manage their external partners’ compliance with key security standards.

Verizon Business announced Wednesday (April 30) several enhancements to its Partner Security Program (PSP), which helps customers address the increased security risks associated with opening up corporate networks to partners, vendors, customers and other business units.

The enhancements consist of additional support for the Payment Card Industry Data Security Standard (PCI DSS), customized reporting capabilities across multiple security standards and regulations, as well as the ability to better manage supporting documentation. The enhanced program provides an extended enterprise - a business and all its locations, customers, suppliers, partners and employees - with a comprehensive view of its partners’ information security activities and a Web-based platform for automated compliance management and reporting.

“Today’s business model has drastically changed, with relationships and networks spanning the globe,” said Kerry Bailey, vice president of Verizon Business Security Solutions. “While these intertwined global relationships can bring significant growth, they also introduce risk. Our program helps companies address these issues and meet their business imperative of securing the extended enterprise.”

Keeping Ahead of the Security Curve

The newest version of PSP includes additional support for the credit card industry’s security standards. A revamped user dashboard includes the latest PCI Self-Assessment Questionnaire (version 1.1), issued by the PCI Security Standards Council in February. The PCI questionnaire provides a validation tool for merchants and service providers to self-evaluate compliance with the standard.

Verizon Business has expanded reporting capabilities for PCI with a new executive summary that provides an immediate snapshot of how well a company’s partners are complying with this standard. The updated dashboard also features a more granular view into vulnerability reporting.

In addition, customers using the PCI module can now take advantage of unlimited scans for registered IP addresses, checking for vulnerabilities as often as needed - quarterly, weekly or even daily. According to industry experts, frequent scanning for vulnerabilities strengthens a company’s overall security and compliance posture.

The newest version of PSP includes enhanced reporting capabilities that support PCI and a host of other security standards and regulations, including ISO 17799:2005, Gramm-Leach-Bliley (GLB) and Federal Financial Institutions Examination Council (FFIEC). As a result, customers can quickly review whether partners are complying with relevant standards and regulations, based on responses to self-attestation questionnaires.

Plus, partners can attach supporting documentation to question responses within the security compliance module. As a result, companies can easily share validating documentation with both internal and external assessors, simplifying the compliance-management process.

Verizon Business’ expert professional security services team, as part of a comprehensive solution, can perform detailed reviews, analysis and recommendations, as needed.

Verizon Business Security Solutions Powered by Cybertrust

Enterprises and government agencies rely on Verizon Business to help them manage security risk and protect critical company assets. Verizon Business Security Solutions offers a comprehensive portfolio of security services that include threat and vulnerability management; identity management; security and compliance programs; and security strategy and consultation. The more than 1,100 security professionals around the globe deliver these offerings through a range of managed services, professional services and products. More information is available by visiting http://www.verizonbusiness.com/us/security. Information specific to the Partner Security Program is available at http://www.verizonbusiness.com/us/products/security/compliance/partner.