Payment Card Industry Data Security Standard Handbook [Hardcover]

Timothy M. Virtue (Author)

Book Description

ISBN-10: 0470260467 | ISBN-13: 978-0470260463 | Publication Date: November 3, 2008 | Edition: 1

Clearly written and easy to use, Payment Card Industry Data Security Standard Handbook is your single source along the journey to compliance with the Payment Card Industry Data Security Standard (PCI DSS), addressing the payment card industry standard that includes requirements for security management, protection of customer account data, policies, procedures, network architecture, software design, and other critical protective measures. This all-inclusive resource facilitates a deeper understanding of how to put compliance into action while maintaining your business objectives.

Editorial Reviews

From the Inside Flap

Payment Card Industry Data Security Standard Handbook

With the significant increase of pay-ment card use and rapid advances in technology, today's organizations enjoy a tremendous amount of benefits brought about by the widespread use of payment cards. However, despite the significant benefits, organizations must address the specific challenges associated with protecting their cardholder data and cardholder data environments.

Holding the Payment Card Industry Data Security Standard (PCI DSS) up to the light of day, Payment Card Industry Data Security Standard Handbook helps organizations proactively protect customer account data, providing a one-stop resource for PCI compliance, including coverage of requirements for security management, policies, procedures, network architecture, software design, and other protective measures.

Written by industry expert Timothy Virtue, this timely book guides, mentors, and assists organizations along their journey to compliance with the PCI DSS and can be used as an initial primer on PCI compliance as well as a reference to support the maintenance and ongoing commitment to PCI compliance. It offers suggested strategies and coverage of topics, including:

• An overall view of the essential components and best practices of a successful information security program

• The network requirements, including configuration, documentation, and testing requirements that must be in place in order to properly secure cardholder data

• The requirements necessary to ensure cardholders are properly protected in the event of a breach or other unauthorized disclosure

• The use of anti-virus software and security patches in order to minimize the overall vulnerability of the cardholder data environment

• Guidelines for developing PCI DSS– compliant Web-based applications

• How organizations should manage access control to the sensitive cardholder data

• How networks must be monitored and tested and what kind of audit trails must be established

• The importance of developing, maintaining, and distributing an information security policy

PCI compliance is not a one-time event or a checked box on an audit form, but an ongoing, sustained process. Filled with practical advice with information that organizations can utilize to achieve and maintain continuous compliance with PCI DSS, Payment Card Industry Data Security Standard Handbook is an authoritative guide that helps readers understand how the PCI DSS requirements fit into every organization's security framework.

From the Back Cover

Praise for Payment Card Industry Data Security Standard Handbook

"While providing insightful guidance on a holistic approach to tackling the Dirty Dozen of PCI, this book also teaches the fundamental principles of information security management. The PCI DSS Handbook is a must-read for all levels of security managers."
—John Reeder, CISSP, CISM, CISA, CIPP, Vice President, Information Security & Compliance

"There's a lot of noise surrounding PCI compliance. This book is the perfect resource to help clear the air so people can focus on what's important."
—Kevin Beaver, security consultant and creator of the Security On Wheels audio programs

Your single source for understanding the Payment Card Industry data Security Standard

The significant benefits of extensive payment card use and rapid advances in technology are immense, but also require your organization to address the specific challenges associated with protecting its cardholder data and cardholder data environments.

Clearly written and easy to use, Payment Card Industry Data Security Standard Handbook is your single source along the journey to compliance with the Payment Card Industry Data Security Standard (PCI DSS), addressing the payment card industry standard that includes requirements for security management, policies, procedures, network architecture, software design, and other critical protective measures.

This all-inclusive resource for payment card industry compliance shows you how your organization can:

• Protect cardholder data, with discussion of the requirements necessary to ensure cardholders are properly protected

• Maintain a vulnerability management program in order to minimize the overall vulnerability of the cardholder data environment

• Implement strong access control measures in order to achieve PCI DSS compliance

• Regularly monitor and test networks to find out how networks must be monitored and tested

• Enforce an information security policy and what it must contain in order to be PCI DSS-compliant

Payment Card Industry Data Security Standard Handbook presents an overall view of the essential components and best practices for successful implementation of an information security program, as well as a deeper understanding of how to put compliance into action while maintaining your business objectives.

See all Editorial Reviews

Product Details

• Hardcover: 216 pages
• Publisher: Wiley; 1 edition (November 3, 2008)
• Language: English
• ISBN-10: 0470260467
• ISBN-13: 978-0470260463
• Product Dimensions: 9 x 6.2 x 0.9 inches
• Shipping Weight: 15.5 ounces (View shipping rates and policies)
• Average Customer Review: 4.0 out of 5 stars  See all reviews (2 customer reviews)
• Amazon Best Sellers Rank: #1,016,186 in Books (See Top 100 in Books)

More About the Author

Discover books, learn about writers, read author blogs, and more.

Customer Reviews

Most Helpful Customer Reviews

2 of 3 people found the following review helpful:

5.0 out of 5 stars A must-have to protect customer data, November 4, 2008

By 

Frank A. Racioppi - See all my reviews
(REAL NAME)   

This review is from: Payment Card Industry Data Security Standard Handbook (Hardcover)

With so much media attention these days on breaches of security by hackers intent upon stealing sensitive customer financial data, this handbook is a must-have to protect your customers and the reputation of your company. Written in a easy, jargon-free style, the handbook is like a cookbook for credit card security. One of the key chapters concerns the importance of audit trails and network monitoring and testing.

3.0 out of 5 stars Avoid the Next Crisis, December 2, 2008

By 

James Mcritchie "Publisher" (Elk Grove, CA USA) - See all my reviews
(VINE VOICE)    (REAL NAME)   

This review is from: Payment Card Industry Data Security Standard Handbook (Hardcover)

With the subprime meltdown now in full swing, credit card defaults and fraud could be the next shoe to drop. Virtue's book is in an easily read cookbook style. Test your security system against Virtue's recommendations now.