PCI DSS: A Practical Guide To Implementing And Maintaining Compliance - Softcover

Softcover

ISBN 10: 1849281866 ISBN 13: 9781849281867

Publisher: It Governance Publishing, 2011

Synopsis

The Payment Card Industry Data Security Standard (PCI DSS) must be met by all organizations (merchants and service providers) that transmit, process or store payment card data. It is a contractual obligation applied and enforced - by means of fines or other restrictions - directly by the payment providers themselves. As the cybercrime market evolves, attackers, targets and techniques do as well. The majority of data breaches still occur because basic controls are not in place, or because those that were present were not consistently implemented across an organization. If obvious weaknesses are left exposed, chances are the attacker will exploit them. The objective of this revised practical guide is to give entities advice and tips on the entire PCI implementation process. It provides a roadmap, helping entities to navigate the broad, and sometimes confusing, PCI DSS v2, and shows them how to build and maintain a sustainable PCI compliance program. This latest revision also includes increased guidance on how to ensure your compliance program is 'sustainable' and has been based on real-life scenarios, which should help to ensure your PCI compliance program remains compliant. Although the guide starts with sections on why and what is PCI, it is not intended to replace the 'publicly available' PCI information. This book looks to serve those who have been given the responsibility of PCI, and does not attempt to provide all the answers. It should be read, absorbed and digested only with a good helping of other PCI 'publicly available' information. In other words, it will help an organization or individual, get started, and hopefully furnish the reader with enough of the fundamental basics to create, design and build the organization's own PCI compliance framework.

About this title

About the Author

Steve Wright is a consultant and lecturer with extensive experience in the design and implementation of security architecture and information security governance frameworks, including PCI DSS. Steve has successfully executed information security projects for several UK government agencies and completed many consulting engagements for global corporations in sectors including business process outsourcing, manufacturing, telecoms, IT and healthcare. He currently manages a successful security management practice, and is a lecturer and trainer on Information Risk Management and many British Computer Society ISEB courses.

Edition details

• Publisher: It Governance Publishing
• Publication date: 2011
• ISBN 10: 1849281866
• ISBN 13: 9781849281867
• Binding: Paperback
• Language: English
• Edition number: 3
• Number of pages: 264
• Editor: IT Governance Publishing