From the Inside Flap
Payment Card Industry Data Security Standard Handbook
With the significant increase of pay-ment card use and rapid advances in technology, today's organizations enjoy a tremendous amount of benefits brought about by the widespread use of payment cards. However, despite the significant benefits, organizations must address the specific challenges associated with protecting their cardholder data and cardholder data environments.
Holding the Payment Card Industry Data Security Standard (PCI DSS) up to the light of day, Payment Card Industry Data Security Standard Handbook helps organizations proactively protect customer account data, providing a one-stop resource for PCI compliance, including coverage of requirements for security management, policies, procedures, network architecture, software design, and other protective measures.
Written by industry expert Timothy Virtue, this timely book guides, mentors, and assists organizations along their journey to compliance with the PCI DSS and can be used as an initial primer on PCI compliance as well as a reference to support the maintenance and ongoing commitment to PCI compliance. It offers suggested strategies and coverage of topics, including:
An overall view of the essential components and best practices of a successful information security program
The network requirements, including configuration, documentation, and testing requirements that must be in place in order to properly secure cardholder data
The requirements necessary to ensure cardholders are properly protected in the event of a breach or other unauthorized disclosure
The use of anti-virus software and security patches in order to minimize the overall vulnerability of the cardholder data environment
Guidelines for developing PCI DSS compliant Web-based applications
How organizations should manage access control to the sensitive cardholder data
How networks must be monitored and tested and what kind of audit trails must be established
The importance of developing, maintaining, and distributing an information security policy
PCI compliance is not a one-time event or a checked box on an audit form, but an ongoing, sustained process. Filled with practical advice with information that organizations can utilize to achieve and maintain continuous compliance with PCI DSS, Payment Card Industry Data Security Standard Handbook is an authoritative guide that helps readers understand how the PCI DSS requirements fit into every organization's security framework.
From the Back Cover
Praise for Payment Card Industry Data Security StandardHandbook
"While providing insightful guidance on a holistic approach totackling the Dirty Dozen of PCI, this book also teaches thefundamental principles of information security management. The PCIDSS Handbook is a must-read for all levels of securitymanagers."
—John Reeder, CISSP, CISM, CISA, CIPP, Vice President,Information Security & Compliance
"There's a lot of noise surrounding PCI compliance. This book isthe perfect resource to help clear the air so people can focus onwhat's important."
—Kevin Beaver, security consultant and creator of theSecurity On Wheels audio programs
Your single source for understanding the Payment CardIndustry data Security Standard
The significant benefits of extensive payment card use and rapidadvances in technology are immense, but also require yourorganization to address the specific challenges associated withprotecting its cardholder data and cardholder dataenvironments.
Clearly written and easy to use, Payment Card Industry DataSecurity Standard Handbook is your single source along thejourney to compliance with the Payment Card Industry Data SecurityStandard (PCI DSS), addressing the payment card industry standardthat includes requirements for security management, policies,procedures, network architecture, software design, and othercritical protective measures.
This all-inclusive resource for payment card industry complianceshows you how your organization can:
Protect cardholder data, with discussion of the requirementsnecessary to ensure cardholders are properly protected
Maintain a vulnerability management program in order to minimizethe overall vulnerability of the cardholder data environment
Implement strong access control measures in order to achieve PCIDSS compliance
Regularly monitor and test networks to find out how networksmust be monitored and tested
Enforce an information security policy and what it must containin order to be PCI DSS-compliant
Payment Card Industry Data Security Standard Handbookpresents an overall view of the essential components and bestpractices for successful implementation of an information securityprogram, as well as a deeper understanding of how to put complianceinto action while maintaining your business objectives.