PCI Compliance
Understand and Implement Effective PCI Data Security Standard Compliance

Understand and implement effective PCI data security standard compliance

Branden R. Williams (Author), Anton Chuvakin (Author)

9780128015797, Elsevier Science

Paperback / softback, published 29 October 2014

386 pages
23.5 x 19 x 2.5 cm, 0.81 kg

Identity theft and other confidential information theft have now topped the charts as the leading cybercrime. In particular, credit card data is preferred by cybercriminals. Is your payment processing secure and compliant? The new Fourth Edition of PCI Compliance has been revised to follow the new PCI DSS standard version 3.0, which is the official version beginning in January 2014. Also new to the Fourth Edition: additional case studies and clear guidelines and instructions for maintaining PCI compliance globally, including coverage of technologies such as NFC, P2PE, CNP/Mobile, and EMV. This is the first book to address the recent updates to PCI DSS. The real-world scenarios and hands-on guidance are also new approaches to this topic. All-new case studies and fraud studies have been added to the Fourth Edition.

Each chapter has how-to guidance to walk you through implementing concepts, and real-world scenarios to help you relate to the information and better grasp how it impacts your data. This book provides the information that you need in order to understand the current PCI Data Security standards and how to effectively implement security on network infrastructure in order to be compliant with the credit card industry guidelines, and help you protect sensitive and personally-identifiable information.

  1. About PCI and This Book
  2. Introduction to Fraud, ID Theft, and Regulatory mandates
  3. Why PCI is Here
  4. Determining and Reducing the PCI Scope
  5. Building and Maintaining a Secure Network
  6. Strong Access Controls
  7. Protect Cardholder Data
  8. Using Wireless Networking
  9. Vulnerability Management and Testing
  10. Logging Events and Monitoring the Cardholder Data Environment
  11. Cloud and Virtualization
  12. Mobile
  13. PCI DSS for the Small Business
  14. Managing PCI DSS Projects to Achieve Compliance
  15. Don't Fear the Assessor
  16. The Art of Compensating Control
  17. So You're Compliant, Now What?
  18. Emerging Technology and Alternative Payment Schemes
  19. PCI DSS Myths and Misconceptions

Subject Areas: Computer security [UR], Business applications [UF], Management of specific areas [KJMV]