New malware program PoSeidon targets retail POS credit card terminals. Lazarus Alliance QSA services protects clients against it.

The stunning reality is that the majority of retailers accepting credit cards are still vulnerable to the newest threat to accepting credit cards from consumers. Lazarus Alliance has been years ahead with proactive cyber security services.

Researchers from the Cisco Security Solutions team have dubbed the latest malware to attack point-of-sales (POS) systems PoSeidon. Compromised POS systems are vulnerable to these attacks, which allow the RAM of an infected terminal to be scanned by the malware. PoSeidon looks for unencrypted credit card data, and then transmits that data out to an exfiltration server controlled by the cyber criminals.

This technique has long been known to security experts. The Proactive Cyber Security™ services at Lazarus Alliance has been years ahead of this issue by offering solutions to companies that utilize POS systems that ensure this memory scraping technique does not compromise a payment process.

William Ochs, GRC Partner of Lazarus Alliance said “Not only has Lazarus Alliance long called for end-to-end encryption technology to be utilized to mitigate the risk posed by POS threats, but Lazarus Alliance also has a proven track record of offering actual solutions to implement end-to-end encryption protecting retailers globally.”

As long as organizations remain reactive instead of proactive in their approach to cyber security, they will continue to fail the constituents they work to protect. The PoSeidon POS malware program is another example in a daunting list of the challenges that face organizations concerned with their PCI DSS stance.

As a PCI DSS audit Qualified Security Assessor (QSA) company, Lazarus Alliance has been approved by the PCI Security Standards Council (SSC) to measure an organization’s compliance to the PCI DSS audit standard. Lazarus Alliance specializes in providing our clients with scalable, efficient solutions for meeting the rigorous demands of Payment Card Industry (PCI) compliance. We do this in part because of our breakthrough proprietary technologies called the IT Audit Machine (ITAM) and the Policy Machine.

“It’s incumbent upon security professionals to proactively advocate for best practices in cyber security, risk and compliance; too often, the opposite occurs in the industry,” said Ochs

Learn more about Lazarus Alliance and why Lazarus Alliance is Proactive Cyber Security™!

Lazarus Alliance unveils the next generation of cyber crime prevention.

Lazarus Alliance released the next generation weapon in the corporate arsenal to fight cyber crime, corporate fraud and criminal cyber-misconduct with the IT Audit Machine (ITAM).

Considered to be the best assessment tool for governance, risk and compliance (GRC) in the global business community, this next generation of ITAM ups the ante by managing big data and frameworks with virtually endless possibilities. These new enterprise capabilities coupled with the already powerful analytic and logic features are a technological force to be reckoned with.

Michael Peters, CEO of Lazarus Alliance said “The IT Audit Machine is just one of the many innovations from Lazarus Alliance that really sets us apart from other cyberspace security, governance, risk and compliance firms.”

Gone are the days where audits, assessments and compliance work was overshadowed by endless spreadsheets, version control madness, escalating costs and audit anarchy. The IT Audit Machine puts the power of technology, collaboration and simplicity to work for the entire enterprise and does it in a progressive, proactive way.

Cyber crime prevention is of paramount concern to organizations of all sizes, all industries and on all parts of the world. Lazarus Alliance put its extensive experience in cyber crime and fraud prevention in the governance, risk and compliance (GRC) spaces to work for the global business community.

“We have for the first time in history seen the CEO of major global brands lose their jobs because of cyber crime. These criminal acts could have been prevented through a proactive cyber security position. Lazarus Alliance is proactive cyber security.” said Peters.

Lazarus Alliance’s primary purpose is to help organizations attain, maintain, and demonstrate compliance and information security excellence, in any jurisdiction. Lazarus Alliance specializes in IT security, risk, privacy, governance, cyberspace law and compliance leadership solutions and is fully dedicated to global success in these disciplines.

Learn more about Lazarus Alliance and why Lazarus Alliance is Proactive Cyber Security™!

Lazarus Alliance SSAE 16 Assessment Services

From SSAE 16 Audits to IT Security Consulting, the experts at Lazarus Alliance provide a variety of services to fulfill your audit needs. SOC 1, SOC 2 and SOC 3: We are ready when you are!

Lazarus Alliance is completely committed to you and your business success. Regardless of whether you represent the private sector or the public sector, we stand ready to partner with your organizations. Our competition may want to keep you and your employees in the dark where security, risk, privacy and governance are concerned hoping to conceal their methodology and expertise. We don’t prescribe to that philosophy. We believe the best approach is transparent and built on a partnership developed on trust and credibility creating sustainability within your organization.

Lazarus Alliance’s primary purpose is to help organizations attain, maintain, and demonstrate compliance and information security excellence – in any jurisdiction. Lazarus Alliance specializes in IT security, risk, privacy, governance,cyberspace law and compliance leadership solutions and is fully dedicated to global success in these disciplines.

Certifications Overview
SOC 1: Once a company has made the decision to enlist a third party to provide a service, they want assurances that those services will be provided timely, accurately, and securely. A SSAE 16 audit shows your commitment to maintaining a sound control environment that protects your client.s data and confidential information.

Not sure which report is right for your organization? Ask yourself these questions:

Will the report be used by your customers and their auditors to plan or perform an audit of their financial statements? If so, then the SOC 1 report is right for you.

SOC 2 and SOC 3: Service Organization Controls (SOC) 2 and 3 reports are designed to provide comfort over the following principles: Security, Confidentiality, Processing Integrity, Availability, and Privacy (if applicable) of a System in-scope. A System is holistically comprised of the Technology, People, Processes, and Data used to complete the services provided.

The following is a brief description of the goals to be achieved with each principle:

• Security: The system is protected against unauthorized access (both physical and logical).
• Confidentiality: Information designated as confidential is protected as committed or agreed.
• Processing Integrity: System processing is complete, accurate, timely, and authorized.
• Availability: The system is available for operation and use as committed or agreed.
• Online Privacy: Personal information obtained as a result of e-commerce is collected, used, disclosed, and retained as committed or agreed.

Still not sure which report is right for your organization? Ask yourself these questions:

Will the report be used by your customers or stakeholders to gain confidence and place trust in a service organization’s systems? If so, then the SOC 2 or SOC 3 report is right for you.

or

Do you need to make the report generally available or seal? If so, then the SOC 3 report is right for you.

We want to be your partner. For additional information please contact us!