|
|
WINTER 2006 Click
here In This Issue: ESP Computer Services Focuses on Security CM Best Start-up Strategy Silver Award Goes to Law Officer Alain Uy: Surfing the Possibilities ESP Now Fulfillment Bureau for California Business Journals Four Elsevier Public Safety Publications Now With ESP ESP Call Center Holiday Schedule The ESP Computer Services Call Center will be closed on the following holidays: Monday, Dec. 25 Monday, Jan. 1 Industry Events NTCFI Holiday Party FMA ESP Computer Services Inc. 12444 Victory Blvd., Suite
400 Feel Free to Share! For more information about our services, go to
|
ESP works continuously to ensure that financial and information controls are in place for the safekeeping of your data and business transactions. To effectively do so requires a comprehensive program to audit our operations and systems, networks, credit card transactions and other financial controls. The following are five major areas of focus. The ESP audits entail hundreds of hours of internal review by ESP personnel as well as validation by independent external auditors. ESP documents financial and IT controls, and tests selected controls that are identified as significant or material to operations, to ensure they work properly. An independent auditor validates the reported results and scrutinizes any weaknesses with continued testing and reporting. PCI Compliance A review by an independent external auditor has confirmed that ESP is compliant with the Payment Card Industry (PCI) scan requirement. The auditor assigned to ESP is accredited by Visa, MasterCard, American Express, Discover Card and JCB to perform network security audits conforming to the Payment Card Industry (PCI) Data Security Standards. In response to an increase in credit card fraud, PCI Compliance was established as a measure to ensure that proper security is maintained over cardholder data. One of the standards that is required for PCI compliance is storing credit card data in an encrypted manner. ESP encrypts the credit card as soon as it’s entered into the system and will only display the last four digits of the card. Physical Controls Physical access to the workplace is controlled by a magnetic key system. These keys can be programmed to only allow access during certain times. Sensitive areas are locked by key and by key-code combination locks. Codes are changed periodically, and when employees are terminated. Work areas are also monitored by closed-circuit television. Password Policies Background Checks Certain positions with higher levels of access are required to undergo background checks. ESP continually evaluates additional security software and hardware,
and policies, procedures and practices for deployment that will complement
our security measures currently in place. While some of our security
measures may seem onerous, they have been integrated into the daily
work process. No system can ever be completely secure. A big part
of any secure system is to value honesty and trustworthiness. ESP
takes great care in hiring, monitoring and promoting its employees,
but we also believe that we need to verify. The audits, monitoring
and security policies are in place to ensure the safety of our clients’
data. We embrace the fiscal and technological responsibilities that
go hand in hand with subscription fulfillment and will continue to
evaluate existing security policies and procedures in order to provide
the best and safest service. |