nuBLOG

Token Manager Product Launch Continues

Gary Palgon
Vice President, Product Management
nuBridges

Global Campaign Makes Stop at ISSA ^UK

The whirlwind global launch of nuBridges Protect™ Token Manager didn’t slow down after InfoSec.  It just moved around the European continent!

More meetings with the three “P”s  -  press, partners and prospects (I would have mentioned analysts, but it didn’t start with a “p”), all wanting to know about how format-preserving tokenization is not only significantly reducing the scope of PCI DSS compliance.  But also protects personally identifiable information such as social security numbers, National Insurance Numbers, and business-critical information such as customer lists, financial statements, payroll data and so on.

A little fun was had over the weekend in Brussels and Bruges and then back to work in Amsterdam for a day, three cities and two countries where I had not traveled.  What a wonderful invention the train was – and so fast now, clocking in at 186 mph on the Nuvi GPS navigator.

As I sit in the airport waiting for my plane to leave (yet again), I’m looking at the pictures from last night’s Information Systems Security Association – United Kingdom (ISSA^UK) annual black tie dinner.  It was held at Armourers’ Hall (Armourers & Brasiers), a building much older than America and containing armor and weapons dating back to the 1500s, again much older than America (I say this twice because I was often reminded of this point:-)).  

There was much discussion from all angles of information technology with the realization (and several speakers noting) that companies and government organizations must take responsibility in caring for sensitive information.  Richard Stanes, the former president of ISSA UK (who lives in Kentucky now) and Sir Edmund Burton, formerly of the British Army and current Chairman of the Information Assurance Advisory Council (IAAC) spoke.

Bobby Conway (right), nuBridges’ EMEA Regional
Sales Manager and I at Armourers’ Hall, London, UK.

Time to board – until next time from the comfort of my office - which I haven’t seen for several weeks …

Cheers,

Gary 

Across many borders and time zones. Greetings from InfoSecurity Europe 2009!

I send you greetings from the UK.  At least I think that’s where I am!  With just 24 hours at home between the RSA Conference in San Francisco and InfoSecurity Europe in London, I’m not sure what time zone I’m in --  PST, EST, GMT!  All kidding aside, yesterday’s InfoSecurity Europe 2009 kickoff was great.  Whilst (that’s how they say it here) the conference is not as big as RSA, there’s a lot more glitz and glamour in the exhibition hall  -  game shows, in-booth bars and any number of costumed people to get folks to stop by their booths.

I presented “How to Reduce the Scope of PCI DSS Audits by Tokenising
Payment Card Data”, with a special focus on trans-border privacy
(that’s privacy with the “i” as in “if”, not “eye”)!

Given there are many more privacy laws in Europe about sending consumer or employee data across country borders, even within the same company, the use of tokens rather than encrypted sensitive data is another great advantage for the use of a tokenization (or tokenisation) solution. Passing tokens instead of production data for testing, also called data masking, would make life easier for many IT and security people.

Do you have examples where tokenization will help you with privacy or data protection mandates?

More to follow in the coming days.

Cheers,
Gary