
PCI Compliance
Understand and Implement Effective PCI Data Security Standard Compliance
Tony Bradley(Editor)
Syngress (Publisher)
Published on 15. August 2007
Book
Paperback/Softback
352 pages
978-1-59749-165-5 (ISBN)
Article exhausted; check for reprint
Description
Identity theft has been steadily rising in recent years, and credit card data is one of the number one targets for identity theft. With a few pieces of key information, organized crime has made malware development and computer networking attacks more professional and better defenses are necessary to protect against attack. The credit card industry established the PCI Data Security standards to provide a baseline expectancy for how vendors, or any entity that handles credit card transactions or data, should protect data to ensure it is not stolen or compromised. This book will provide the information that you need to understand the PCI Data Security standards and how to effectively implement security on the network infrastructure in order to be compliant with the credit card industry guidelines and protect sensitive and personally identifiable information.The authors are well known and each has an extensive information security background, making them ideal for conveying the information the reader needs.
More details
Language
English
Place of publication
Rockland, MA
United States
Target group
Professional and scholarly
Illustrations
Illustrations
Dimensions
Height: 229 mm
Width: 178 mm
ISBN-13
978-1-59749-165-5 (9781597491655)
Copyright in bibliographic data and cover images is held by Nielsen Book Services Limited or by the publishers or by their respective licensors: all rights reserved.
Schweitzer Classification
Other editions
New editions

Anton Chuvakin | Branden R. Williams
PCI Compliance
Understand and Implement Effective PCI Data Security Standard Compliance
Book
12/2009
2nd Edition
Syngress
€71.38
Article exhausted; check for reprint
Additional editions

Stony Brook University Chuvakin | Branden R. Williams | Tony Bradley
PCI Compliance
Understand and Implement Effective PCI Data Security Standard Compliance
E-Book
04/2011
1st Edition
Elsevier
€49.95
Available for download
Persons
Branden R. Williams (CISSP, CISM, CPISA, CPISM) leads an information security practice in a Global Security Consulting group at a major security firm in Flower Mound, TX and teaches in the NSA Certified Information Assurance program at the University of Dallas's Graduate School of Management. Branden has been involved in information technology since 1994, and focused on information security since 1996. He started consulting on payment security in 2004, assessing companies against the Visa CISP and Mastercard SDP programs. He has a Bachelors of Business Administration in Marketing from the University of Texas, Arlington, and a Masters of Business Administration in Supply Chain Management and Market Logistics from the University of Dallas. Branden publishes a monthly column in the ISSA Journal entitled "Herding Cats," and authors a blog at http://www.brandenwilliams.com/. Dr. Anton Chuvakin (http://www.chuvakin.org) is a recognized security expert in the field of log management and PCI DSS compliance. He is an author of books "Security Warrior" and "PCI Compliance" and a contributor to "Know Your Enemy II", "Information Security Management Handbook" and others. Anton has published dozens of papers on log management, correlation, data analysis, PCI DSS, security management (see list www.info-secure.org) . His blog http://www.securitywarrior.org is one of the most popular in the industry. In addition, Anton teaches classes and presents at many security conferences across the world; he recently addressed audiences in United States, UK, Singapore, Spain, Russia and other countries. He works on emerging security standards and serves on the advisory boards of several security start-ups. Currently, Anton is developing his security consulting practice, focusing on logging and PCI DSS compliance for security vendors and Fortune 500 organizations. Dr. Anton Chuvakin was formerly a Director of PCI Compliance Solutions at Qualys. Previously, Anton worked at LogLogic as a Chief Logging Evangelist, tasked with educating the world about the importance of logging for security, compliance and operations. Before LogLogic, Anton was employed by a security vendor in a strategic product management role. Anton earned his Ph.D. degree from Stony Brook University. Tony Bradley (CISSP-ISSAP) is the Guide for the Internet/Network Security site on About.com, a part of The New York Times Company. He has written for a variety of other Web sites and publications, including BizTech Magazine, PC World, SearchSecurity.com, WindowsNetworking.com, Smart Computing magazine, and Information Security magazine. Tony is a CISSP (Certified Information Systems Security Professional) and ISSAP (Information Systems Security Architecture Professional). He is Microsoft Certified as an MCSE (Microsoft Certified Systems Engineer) and MCSA (Microsoft Certified Systems Administrator) in Windows 2000 and an MCP (Microsoft Certified Professional) in Windows NT. Tony is recognized by Microsoft as an MVP (Most Valuable Professional) in Windows security. On his About.com site, Tony has on average over 600,000 page views per month and over 30,000 subscribers to his weekly newsletter. Tony was also author of Essential Computer Security: Everyone's Guide to E-mail, Internet, and Wireless Security (ISBN: 1597491144).
Content
1: Foreword
2: Introduction
3: Why PCI Is Important
4: Build & Maintain a Secure Network
5: Protect Cardholder Data
6: Vulnerability Management
7: Strong Access Control
8: Logging Access & Events
9: Monitor & Test
10: Monitoring Information Security Policy
11: How to Plan a Project to Meet Compliance
12: Leveraging PCI Compliance efforts with other Compliance Requirements
13: Responsibilities
14: Preparing to Fail Your First Test
15: You're Compliant, Now What
2: Introduction
3: Why PCI Is Important
4: Build & Maintain a Secure Network
5: Protect Cardholder Data
6: Vulnerability Management
7: Strong Access Control
8: Logging Access & Events
9: Monitor & Test
10: Monitoring Information Security Policy
11: How to Plan a Project to Meet Compliance
12: Leveraging PCI Compliance efforts with other Compliance Requirements
13: Responsibilities
14: Preparing to Fail Your First Test
15: You're Compliant, Now What