All twenty speaking slots for the first ever Geek Speak BarCamp are filled and the scheduled is locked in tight. (Read background on Geek Speak BarCamp here, here and here). This event happens on the evening of May 21st at Synergy in Houston (in room 360 right after Geek Speak Live).

I have communicated to all the speakers the schedule, and this is now the final one I will post before Citrix Synergy. We have had a few changes (including one speaker dropping due to another commitment) but we have twenty full sessions.

The line up now includes FOUR Citrix Technology Specialists, four consultants, two Escalation Tech Support Engineers, four Product Managers, a HP Print Driver Developer and a Senior Architect from a large healthcare company.

If you have not yet registered for Citrix Synergy, you can click here to to complete your registration. I look forward to seeing you at Synergy and the Geek Speak BarCamp.

Everybody has heard the stories and wants to believe - but there's no such thing as "PCI Compliant" products*.

People are constantly asking the question: Is "Product X" PCI compliant? The short answer is: No.

The long answer requires some careful explanation.

PCI sets forth 12 major requirements for an organization to meet, with the result of meeting these requirements culminating in an attestation of compliance. The PCI auditor verifies that the intent of PCI has been met, and compliance is granted. (OK, I know I just oversimplified a very complex set of processes - but the result is the same: the organization is deemed compliant or not)

But, what about the products that are used to support organizational PCI compliance? Network firewalls, antivirus, IDS/IPS, and application firewalls are listed in the PCI specification as core products whose functionality is required to obtain PCI compliance. Don't these products have to be certified as compliant? No, there is no provision for product compliance in the PCI DSS v1.1 specification.

So, given that PCI doesn't directly certify products, what should an organization do to provide audit assurance that products can be used for the intended PCI purpose?

1. Verify vendor claims - just because a salesperson says it, it doesn't make the statement true.
   
2. Rely on trusted third-parties - organizations like ICSA Labs, NSS Labs, WASC and OWASP have detailed product capability matrixes, testing and certification criteria, and comparative data.
   
3. Discuss concerns with your auditors - because PCI auditors make the final decision on compliance, they should be involved in key decisions leading up to the certification event.
   

There have been some wild claims with PCI - including the notion of "PCI certified products." When faced with conflicting information, work with trusted vendors and partners, press your auditor or PCI QSA for the documented facts, and escalate ambiguity as necessary through to the PCI Security Standards Council.

With factual information and proper actions, we can all help PCI reach its lofty goal: Increase trust in credit card usage by holding merchants to a high standard - the PCI DSS.

PCI Backgrounder

PCI DSS, the Payment Card Industry Data Security Standard (or simply PCI) specifies compliance standards for credit card usage. If your organization stores, processes, or transmits credit card data, PCI applies to you. The PCI Security Standards Council maintains and publishes the standard at www.pcisecuritystandards.org.

*Note: There is a "Listing of PCI Security Standards Council Approved PIN Entry Devices" at: https://www.pcisecuritystandards.org/pin/pedapprovallist.html_. The PED's are the only products to have PCI SSC approval._

Application developers are leveraging Ajax to deliver the next generation of Web applications. In this white paper learn:

• What Ajax is (and isn't)
• How Ajax applications differ from traditional web applications
• How Citrix NetScaler can increase the performance of Ajax applications while reduce the cost of hosting Ajax applications
  
  
  
  

The voting is now open for this years Citrix Innovation Award -

The Citrix Innovation Award is for Citrix customers who innovate in utilizing technology to make a significant impact on their business. Ultimately, information technology is about delivering applications to end users so they can perform business transactions. These three nominees have innovated in their use of Citrix technology to cut costs, reduce time to revenue for projects, and to mitigate risk.

Here is the video from Betchel Corporation -

Next up is Cocamar Cooperativa Agroindustrial-

And finally the video for Mutual of Omaha (yes, the Wild Kingdom guys for those who remember that show) -

The judges for this years Citrix Innovation Award are listed below -

How to Vote
You can vote now for the Citrix Innovation award online at http://www.citrix.com/innovationaward. The winner will be named during the keynote session at Citrix Synergy 2008 on Wednesday, May 21st. Citrix Synergy will be held on May 20th to May 23rd at the George R. Brown Convention Center in Houston.

If you have not yet registered for Citrix Synergy, you can click here to to complete your registration. I look forward to seeing you at Synergy..

In my previous post on Geek Speak Bar Camp (May 21st at Citrix Synergy), we had foruteen of the twenty speaking slots filled. As of now, all twenty speaking slots for the first ever Geek Speak BarCamp are filled. (Read background on Geek Speak BarCamp here, here and here).

 
The line up now includes three Citrix Technology Specialists, four consultants, two Escalation Tech Support Engineers, a VDI Specialist from VMWare, four Product Managers, an HP Print Driver Developer and a Senior Architect from a large healthcare company.

I am looking forward to flying to Houston and getting this event started. I think that after seeing this line up and the list of technical sessions in the other tracks, I think you will agree with Shawn Bass when he wrote -

I am still working on juggling the time schedule to meet everyones equipment requirements and time constraints. I expect to finalize by Monday or Tuesday.

If you have not yet registered for Citrix Synergy, you can click here to to complete your registration. I look forward to seeing you at Synergy and the Geek Speak BarCamp.