PCI Compliance

Understand and Implement Effective PCI Data Security Standard Compliance
4. Auflage 2014
ISBN: 978-0-12-801579-7
Verlag: William Andrew Publishing

Buch, Englisch, 386 Seiten, Format (B × H): 191 mm x 235 mm, Gewicht: 810 g

Identity theft and other confidential information theft have now topped the charts as the leading cybercrime. In particular, credit card data is preferred by cybercriminals. Is your payment processing secure and compliant? The new Fourth Edition of PCI Compliance has been revised to follow the new PCI DSS standard version 3.0, which is the official version beginning in January 2014. Also new to the Fourth Edition: additional case studies and clear guidelines and instructions for maintaining PCI compliance globally, including coverage of technologies such as NFC, P2PE, CNP/Mobile, and EMV. This is the first book to address the recent updates to PCI DSS. The real-world scenarios and hands-on guidance are also new approaches to this topic. All-new case studies and fraud studies have been added to the Fourth Edition.

Each chapter has how-to guidance to walk you through implementing concepts, and real-world scenarios to help you relate to the information and better grasp how it impacts your data. This book provides the information that you need in order to understand the current PCI Data Security standards and how to effectively implement security on network infrastructure in order to be compliant with the credit card industry guidelines, and help you protect sensitive and personally-identifiable information.

Autoren/Hrsg.

Williams, Branden R.

Chuvakin, Anton

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz
• Mathematik | Informatik EDV | Informatik Daten / Datenbanken Kryptologie, Informationssicherheit
• Wirtschaftswissenschaften Betriebswirtschaft Management Compliance
• Wirtschaftswissenschaften Betriebswirtschaft Wirtschaftsinformatik, SAP, IT-Management
• Mathematik | Informatik EDV | Informatik Angewandte Informatik Wirtschaftsinformatik

Inhaltsverzeichnis

- About PCI and This Book
- Introduction to Fraud, ID Theft, and Regulatory mandates
- Why PCI is Here
- Determining and Reducing the PCI Scope
- Building and Maintaining a Secure Network
- Strong Access Controls
- Protect Cardholder Data
- Using Wireless Networking
- Vulnerability Management and Testing
- Logging Events and Monitoring the Cardholder Data Environment
- Cloud and Virtualization
- Mobile
- PCI DSS for the Small Business
- Managing PCI DSS Projects to Achieve Compliance
- Don't Fear the Assessor
- The Art of Compensating Control
- So You're Compliant, Now What?
- Emerging Technology and Alternative Payment Schemes
- PCI DSS Myths and Misconceptions

Über Autor(innen)

Williams, Branden R.
Branden R. Williams (CISSP, CISM, CPISA, CPISM) leads an information security practice in a Global Security Consulting group at a major security firm in Flower Mound, TX and teaches in the NSA Certified Information Assurance program at the University of Dallas's Graduate School of Management. Branden has been involved in information technology since 1994, and focused on information security since 1996. He started consulting on payment security in 2004, assessing companies against the Visa CISP and Mastercard SDP programs. He has a Bachelors of Business Administration in Marketing from the University of Texas, Arlington, and a Masters of Business Administration in Supply Chain Management and Market Logistics from the University of Dallas.
Branden publishes a monthly column in the ISSA Journal entitled "Herding Cats," and authors a blog at http://www.brandenwilliams.com/.

Chuvakin, Anton
Dr. Anton Chuvakin is a recognized security expert in the field of log
management and PCI DSS compliance. He is an author of the books "Security Warrior" and "PCI
Compliance" and has contributed to many others, while also publishing dozens of papers on
log management, correlation, data analysis, PCI DSS, and security management. His blog
(http://www.securitywarrior.org) is one of the most popular in the industry.
Additionaly, Anton teaches classes and presents at many security conferences across the world
and he works on emerging security standards and serves on the advisory boards of
several security start-ups. Currently, Anton is developing his security consulting practice,
focusing on logging and PCI DSS compliance for security vendors and Fortune 500 organizations.
Anton earned his Ph.D. from Stony Brook University.