intouch.jpg (5786 bytes) .......FROM .......esplogo.jpg (6790 bytes)

ESP Computer Services Focuses on Security

WINTER 2006

Click here
for the full PDF Version

In This Issue:

ESP Computer Services Focuses on Security

CM Best Start-up Strategy Silver Award Goes to Law Officer

Letter From the President

Alain Uy: Surfing the Possibilities

ESP Now Fulfillment Bureau for California Business Journals

Four Elsevier Public Safety Publications Now With ESP

ESP Call Center Holiday Schedule

The ESP Computer Services Call Center will be closed on the following holidays:

Monday, Dec. 25 Monday, Jan. 1

Industry Events

NTCFI Holiday Party
December 6, 2006
5:30 – 7:30 pm
Penn Club
New York, NY
www.ntcfi.org

FMA
December 13, 2006
Holiday Party
Princeton Club, NY
www.fmanational.org

ESP Computer Services Inc.

12444 Victory Blvd., Suite 400
N. Hollywood, CA 91606
Phone: (818) 487-4500
Fax: (818) 487-4501

Sales@espcomp.com

Feel Free to Share!
Readers may reprint or redistribute this newsletter or articles in it. However, the above contact information must be included.

For more information about our services, go to 
www.espcomp.com

 

 


ESP is serious about your security.

ESP works continuously to ensure that financial and information controls are in place for the safekeeping of your data and business transactions. To effectively do so requires a comprehensive program to audit our operations and systems, networks, credit card transactions and other financial controls.

The following are five major areas of focus.

System Audits

The ESP audits entail hundreds of hours of internal review by ESP personnel as well as validation by independent external auditors. ESP documents financial and IT controls, and tests selected controls that are identified as significant or material to operations, to ensure they work properly. An independent auditor validates the reported results and scrutinizes any weaknesses with continued testing and reporting.

PCI Compliance

A review by an independent external auditor has confirmed that ESP is compliant with the Payment Card Industry (PCI) scan requirement. The auditor assigned to ESP is accredited by Visa, MasterCard, American Express, Discover Card and JCB to perform network security audits conforming to the Payment Card Industry (PCI) Data Security Standards. In response to an increase in credit card fraud, PCI Compliance was established as a measure to ensure that proper security is maintained over cardholder data. One of the standards that is required for PCI compliance is storing credit card data in an encrypted manner. ESP encrypts the credit card as soon as it’s entered into the system and will only display the last four digits of the card.

Physical Controls

Physical access to the workplace is controlled by a magnetic key system. These keys can be programmed to only allow access during certain times. Sensitive areas are locked by key and by key-code combination locks. Codes are changed periodically, and when employees are terminated. Work areas are also monitored by closed-circuit television.

Password Policies

Access to the system requires a userID and password combination. The system enforces that passwords must be changed at least every six months. You can also change your password at any time that you deem appropriate.

Background Checks

Certain positions with higher levels of access are required to undergo background checks.

ESP continually evaluates additional security software and hardware, and policies, procedures and practices for deployment that will complement our security measures currently in place. While some of our security measures may seem onerous, they have been integrated into the daily work process. No system can ever be completely secure. A big part of any secure system is to value honesty and trustworthiness. ESP takes great care in hiring, monitoring and promoting its employees, but we also believe that we need to verify. The audits, monitoring and security policies are in place to ensure the safety of our clients’ data. We embrace the fiscal and technological responsibilities that go hand in hand with subscription fulfillment and will continue to evaluate existing security policies and procedures in order to provide the best and safest service.

 

BACK TO TOP