SECURING FIBRE CHANNEL FABRICS - Brocade

Compliance and Storage9Certainly, most organizations will demonstrate due diligence andimplement security measures on their own to protect their sensitiveand critical data from loss or theft. Nonetheless, one of the primarydriving factors for organizations to implement specific security measuresis compliance, particularly mandatory and regulatorycompliance. Compliance is the state of being in accordance withestablished guidelines, specifications, or legislation. These guidelines,specifications, and legislation can be industry-specific, an acceptedstandard, or government legislation. Guidelines and specifications arenot necessarily mandatory; some provide guidelines on which organizationscan base their security policies to better protect their ITenvironments. Legislative specifications, however, are mandatory forcertain organizations. Non-compliance is not an option and if prosecuted,organizations face severe penalties, including fines and jailtime for executives in some cases.Guidelines, specifications, and legislation are not generally aimed atone specific area of technology, such as SANs and storage, but usuallyapply to all technologies and systems. A holistic approach is the beststrategy to meet most regulatory compliance requirements.Payment Card Industry Data Security Standard(PCI-DSS)The PCI-DSS standard has been one of the most significant drivers foradoption of encryption solutions for data-at-rest and data-in-flight toaddress the protection of information related to credit cardtransactions.The PCI Security Standards Council was formed in December 2004 byits founding members:• Visa Inc.• Master Card WorldwideSecuring Fibre Channel Fabrics 155