Minimize the Impact of PCI Section 3 on SAP Applications - Paymetric

How Does XiSecure Work?
XiSecure removes credit
card numbers from
distributed business
applications and replaces
<strong>the</strong>m with tokens.
The credit card numbers
are <strong>the</strong>n stored, in a
centralized XiSecure
server.
Credit card numbers are
encrypted and managed
within <strong>the</strong> XiSecure server.
Key management and key
rotation can occur within
<strong>the</strong> XiSecure server, without
application downtime.
CRM
NO CREDIT CARD
NUMBERS REMAIN
IN BUSINESS APPS
ERP
SAP
0 1 2 3 4 5 67 8 9
WEB
Conclusion
Whe<strong>the</strong>r a security administrator is tasked with complying with <strong>the</strong> <strong>PCI</strong> standard, adhering to
ano<strong>the</strong>r standard such as HIPAA or GLBA, or is simply looking to optimize <strong>the</strong> security <strong>of</strong> sensitive
information, encryption is essential. Companies with heterogeneous SAP environments adopting
an approach to encryption in which sensitive data is centralized and tokenized, gain significant
benefits in terms <strong>of</strong> security, efficiency, and cost savings. Paymetric’s XiSecure represents a
commercial product that enables organizations to quickly and easily harness <strong>the</strong> benefits <strong>of</strong>
centralization and tokenization—and so minimize exposure, streng<strong>the</strong>n security, and dramatically
reduce <strong>the</strong> cost <strong>of</strong> encryption.
© 2008 Paymetric, Inc. All rights reserved.
15.