TAB Bank Selects Vormetric to Comply with PCI DSS
Growing Commercial Bank Secures Online and Archived Data with Vormetric Encryption and Key Management
SAN JOSE, Calif. – April 18, 2012 – Vormetric, Inc., the leader in enterprise systems encryption and key management, today announced that TAB Bank has deployed Vormetric Data Security to comply with PCI DSS (payment card industry data security standard). Vormetric is providing encryption and key management for TAB Bank to protect online and archived data across a highly virtualized IT infrastructure. TAB Bank selected Vormetric for its easy to use policy management system and transparent architecture which did not require any modifications the bank’s applications or IT environment.
TAB Bank is a wholly owned subsidiary of FJ Management, Inc. and currently provides working capital, equipment financing and deposit products to a wide variety of business sectors while retaining its leadership position within the transportation financing industry. The bank provides personal, business and lender solutions, and specializes in products to support the rapid growth of small to medium sized businesses across the United States.
“PCI DSS requires that all stored cardholder data be encrypted, irrespective of the file type or location, but we were concerned that it could negatively impact the performance of our whole infrastructure,” said Daryl Belfry, Director of IT for TAB Bank.
“The Vormetric solution provides us with all the encryption capabilities we needed to attain PCI DSS compliance. Since going live we’ve experienced no impact on systems’ performance.
Vormetric appliances work as described and more, and we are delighted with the solution,” he added.
One Security Solution for All Data Types
Vormetric is encrypting all sensitive and regulated data for TAB Bank in a variety of data formats, including backups. TAB Bank’s infrastructure is heavily virtualized with VMware and a virtual desktop infrastructure (VDI), but also includes SQL Server and AIX-based database servers and a wide variety of operating systems. Vormetric Data Security is providing comprehensive coverage across this diverse infrastructure. The Vormetric solution also provides for a separation of duties, e.g., enabling access permissions for system administrators to be configured to allow execution of limited functions, while the security officer can be granted a superset of administration privileges. TAB Bank was able to implement Vormetric in a primary datacenter as well as a disaster recovery site in much less time than anticipated.
“We had a Vormetric consultant booked for three days onsite, but after the first day we had already achieved everything we needed,” said John Hillas, Senior Systems Administrator for TAB Bank.
“We like the simplicity of the Vormetric approach and the manageability from an administrator perspective. We are a rapidly expanding and dynamic business, and the flexibility Vormetric provides is crucial to the bank: It’s a solution that grows with us and allows us to securely maintain our data at all times.”
To simplify security policy creation, Vormetric’s unique learn mode capability logs user interactions so TAB Bank administrators can see how data is being accessed and configure data access rules to take these patterns into consideration. This has allowed TAB Bank to implement the right policies from the outset. By their own account, the Vormetric implementation process was far more intuitive than they had expected.
“Vormetric provides a proven data security solution to enable rapid compliance with multiple aspects of PCI DSS,” said Bruce Johnson, VP Worldwide Sales & Service Operations for Vormetric. “A demonstration of the Vormetric solution showed that we impose minimal impact on infrastructure performance, TAB Bank was so impressed they decided a proof of concept project would not be necessary.”
Vormetric (@Vormetric) is the leader in enterprise system encryption. The Vormetric Data Security product line provides a single, manageable and scalable solution to manage any key and encrypt any file, any database, any application, anywhere it resides— without sacrificing application performance and avoiding key management complexity. Some of the largest and most security conscious organizations and government agencies in the world, including 15 of the Fortune 25, have standardized on Vormetric to provide strong, easily manageable data security. Vormetric technology has previously been selected by IBM as the database encryption solution for DB2 and Informix on LinuxTM, Unix® and Windows; and by Symantec to provide the Symantec Veritas NetBackupTM Media Server Encryption Option. For more information, visit www.vormetric.com.
Marc Gendron PR