Re: sensitive data

[smorrison@xxxxxxxxxxxxxxxxxxx]

Lim,

Check the PCI standards for handling credit card information. Here's the 
main site: https://www.pcisecuritystandards.org/
There's a link to download the PCI Data Security Standard.

You will need to encrypt the credit card numbers, and log all who 
view/change this data. I found the encryption key handling to be more 
involved than the actual encryption/decryption of the data.


Steven Morrison
Fidelity Express 




"Lim Hock-Chai" <Lim.Hock-Chai@xxxxxxxxxxxxxxx> 
Sent by: rpg400-l-bounces@xxxxxxxxxxxx
10/25/2007 01:23 PM
Please respond to
RPG programming on the AS400 / iSeries <rpg400-l@xxxxxxxxxxxx>


To
"RPG programming on the AS400 / iSeries" <rpg400-l@xxxxxxxxxxxx>
cc

Subject
sensitive data






Just want to know how other handle file that contains both sensitive and
non-sensitive data field.  For example, Customer-Billing-Info Master
file might have Billing Address fields (Non-Sensitive Data) and Credit
Card field (Sensitive data).  Do you create special Service Program to
access those field, using field level auth...?