Encrypting data transmissions on a dedicated phone line.
We are analyzing all information transfers including FTPs and the need for encrypting data during transit. Some information travels over a dedicated phone line, such as debit card information, and since we are consistently under scrutiny by regulatory compliance, wondered if there were any specific guidelines that covered the requirement for encryption if confidential information is transmitted over a dedicated phone line.
Software/Hardware used:
Software/Hardware used:
ASKED:
November 4, 2004 10:40 AM
UPDATED:
November 5, 2004 10:59 AM
Answer Wiki:
Phone line -dedicated or not is just the physical media that the data is transferred over. HIPAA, GLB, Sarbanes-Oxley all deal with data and requirements for protecting that data, NOT the physical media. The physical security requirements - limited access to workstations, data servers, data centers - deal with preventing wiretaps.
A 'dedicated' phone line is not secure and will not relieve you of requirements for encryption.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
