PCI compliance : understand and implement effective PCI data security standard compliance / Anton A. Chuvakin, Branden R. Williams ; technical editor, Ward Spangenberg.
By: Chuvakin, Anton
.
Contributor(s): Williams, Branden R.
Material type: 
BookPublisher: Amsterdam ; Boston : Elsevier, 2010Edition: 2nd ed.Description: xviii, 348 p. : ill. ; 24 cm. + pbk.ISBN: 9781597494991 ; 1597494992.Uniform titles: PCI compliance. Subject(s): Data protection -- Standards | Computer networks -- Security measures | Credit cards | Liability for credit informationDDC classification: 005.8 | Item type | Current library | Call number | Copy number | Status | Barcode | |
|---|---|---|---|---|---|---|
| General lending | MTU Bishopstown Library Lending | 005.8 (Browse shelf(Opens below)) | 1 | Available | 00114479 |
Enhanced descriptions from Syndetics:
PCI Compliance: Understand and Implement Effective PCI Data Security Standard Compliance, Second Edition, discusses not only how to apply PCI in a practical and cost-effective way but more importantly why. The book explains what the Payment Card Industry Data Security Standard (PCI DSS) is and why it is here to stay; how it applies to information technology (IT) and information security professionals and their organization; how to deal with PCI assessors; and how to plan and manage PCI DSS project. It also describes the technologies referenced by PCI DSS and how PCI DSS relates to laws, frameworks, and regulations.
This book is for IT managers and company managers who need to understand how PCI DSS applies to their organizations. It is for the small- and medium-size businesses that do not have an IT department to delegate to. It is for large organizations whose PCI DSS project scope is immense. It is also for all organizations that need to grasp the concepts of PCI DSS and how to implement an effective security framework that is also compliant.
Rev. ed. of: PCI compliance / technical editor, Ward Spangenberg, 2007.
Includes bibliographical references and index.
About PCI and this book -- Introduction to fraud, ID theft, and regulatory mandates -- Why is PCI here? -- Building and maintaining a secure network -- Strong access controls -- Protecting cardholder data -- Using wireless networking -- Vulnerability management -- Logging events and monitoring the cardholder -- Managing a PCI DSS project to achieve compliance -- Don't fear the assessor -- The art of compensating control -- You're compliant, now what? -- PCI and other laws, mandates, and frameworks -- Myths and misconceptions of PCI DSS.
Table of contents provided by Syndetics
- Foreword
- Acknowledgments
- Chapter 1 About PCI and This Book
- Chapter 2 Introduction to Fraud, ID Theft, and Regulatory Mandates
- Chapter 3 Why Is PCI Here?
- Chapter 4 Building and Maintaining a Secure Network
- Chapter 5 Strong Access Controls
- Chapter 6 Protecting Cardholder Data
- Chapter 7 Using Wireless Networking
- Chapter 8 Vulnerability Management
- Chapter 9 Logging Events and Monitoring the Cardholder Data Environment
- Chapter 10 Managing a PCI DSS Project to Acheive Compliance
- Chapter 11 Don't Fear the Assessor
- Chapter 12 The Art of Compensating Control
- Chapter 13 You're Compliant, Now What?
- Chapter 14 PCI and Other Laws, Mandates, and Frameworks
- Chapter 15 Myths and Misconceptions of PCI DSS
Author notes provided by Syndetics
Dr. Anton Chuvakin is a recognized security expert in the field of logmanagement and PCI DSS compliance. He is an author of the books "Security Warrior" and "PCI
Compliance" and has contributed to many others, while also publishing dozens of papers on
log management, correlation, data analysis, PCI DSS, and security management. His blog
(http://www.securitywarrior.org) is one of the most popular in the industry.
Additionaly, Anton teaches classes and presents at many security conferences across the world
and he works on emerging security standards and serves on the advisory boards of
several security start-ups. Currently, Anton is developing his security consulting practice,
focusing on logging and PCI DSS compliance for security vendors and Fortune 500 organizations.
Anton earned his Ph.D. from Stony Brook University.
Branden R. Williams (CISSP, CISM, CPISA, CPISM) leads an information security practice in a Global Security Consulting group at a major security firm in Flower Mound, TX and teaches in the NSA Certified Information Assurance program at the University of Dallas's Graduate School of Management. Branden has been involved in information technology since 1994, and focused on information security since 1996. He started consulting on payment security in 2004, assessing companies against the Visa CISP and Mastercard SDP programs. He has a Bachelors of Business Administration in Marketing from the University of Texas, Arlington, and a Masters of Business Administration in Supply Chain Management and Market Logistics from the University of Dallas.
Branden publishes a monthly column in the ISSA Journal entitled "Herding Cats," and authors a blog at http://www.brandenwilliams.com/.