"In the IT security field, you fight knowledge with knowledge"

Robert Hocking, 2005
Symtrex CTO

regulatory compliance

Symtrex offers experience and expertise in assisting businesses and organizations with IT Security Compliance. A maze of regulations, along with internal security standards, requires a proven system to ensure proper compliance. Regulatory acts that impact security standards include:

Regulatory Acts:

PCI / CISP - Payment Card Industry and Cardholder Information Security Program. The PCI Data Security Standard is an initiative that sets security standards involving credit card, debit, prepaid, ATM, POS, e-purse and other related businesses. .

DCID 6/3 Director of Central Intelligence Directive 6/3 mandates regulations on facilities including access control and security alarms when Sensitive Compartmentalized Information (SCI) classified level information is involved.

HIPAA - Health Insurance Portability and Accountability Act sets national standards for the protection of electronic health information that are enforced by the Office of Civil Rights. This includes confidentiality as provided by the Patient Safety Rule.

NISPOM Chapter 8 - National regulations pertaining to information system security.

SOX - The Sarbanes Oxley Act of 2002 sets regulations for public companies. It is also known as the Public Company Accounting Reform and Investor Protection Act and Auditing Accountability and Responsibility Act.

ISO17799 - The regulation sets standards for information security including the protection of data on public networks and data sent over the internet.

Symtrex can provide an online vulnerability assessment to analyze what risks exist in your company or organization. We use state-of-the-art scanning technology to search for vulnerabilities in your system. Our scanning procedures meets or exceeds industry standards and regulations including SOX, HIPAA, PCI Data Security Standard and the Federal Information Security Management Act.

We also provide IT security audits to ensure that your organization is in compliance with existing regulations and internal security standards. Our three operating service departments can handle each phase of security system operations from analyzing an organization's requirements to implementation and then follow up through regular audits of the service. In this way we can provide the best possible solution that are specific to your own needs.

For more information on how Symtrex can help you with IT Security compliance, please contact us directly to discuss your needs with one of our knowledgeable representatives.