New Customers

  • Get the most out of support in 5 simple steps Go

 

Regulatory Compliance

Monitor Regulated Data and Ensure Compliance

The Payment Card Industry Data Security Standard (PCI DSS) and multiple federal statutes such as the Gramm-Leach-Bliley Act (GLBA), Health Insurance Portability and Accountability Act (HIPAA) and Sarbanes-Oxley (SOX), exist to protect an individual's data such as social security numbers, account numbers, credit card numbers, medical records, claims submissions, drivers license numbers, and any other information deemed non-public.

Legislation is frequently enacted or expanded to guarantee protections of personally identifiable information (PII) that is stored and handled in digital form. Some legislation requires a periodic audit to validate compliance (e.g. PCI) while others enforce compliance at the time a breach has actually taken place. Organizations must not only bear the expense of fines and remediation if they suffer a data loss, but they also risk the resulting loss of shareholder and customer confidence. This can have an adverse impact on reputation, brand, stock value, and even the potential for criminal prosecution against company executives. It doesn't matter whether breaches are accidental or deliberate; what matters is that the organization is seen to have failed in its responsibility to care for personal and confidential information.

Websense Data Security solutions protect against data loss by quickly analyzing data and enforcing corporate security policies automatically whether users are on the network or offline. Websense offers the leading data loss prevention (DLP) solution designed to protect customer information, intellectual property, and enforce and report on regulatory compliance. Through patented PreciseID technology, Websense accurately identifies confidential data, monitors its use, and enables administrators to create and implement content enforcement policies.

Websense is the only data loss prevention solution that provides content, context, and destination awareness, allowing administrators to manage who can send what information where and how.

The solution provides easy-to-use security policy templates and a sophisticated policy engine with highly granular controls to help ensure compliance with the most widely enforced compliance requirements, including:

International Regulations

  • The Payment Card Industry Data Security Standard (PCI DSS) and Check 21 Act
  • UK Data Protection Act
  • Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
  • International government and banking regulations for the European Union, United Kingdom, Israel, South Africa, Australia and Singapore

US Federal Regulations

  • Gramm-Leach-Bliley Act (GLBA)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • Sarbanes Oxley (SOX)
  • Children's Online Privacy Protection Act (COPPA)
  • Family Educational Rights and Privacy Act (FERPA)

US State Regulations

  • California's AB 1950 and SB1386/CC1798
  • Nevada NRS 597.970
  • Massachusetts 201 CMR 17.00
  • Florida's HB 481
  • Georgia's SB 230
  • Illinois' HB 1633
  • New York's AB 4254
  • Pennsylvania's SB 712
  • Utah's SB 69