PCI DSS: A Practical Guide to Implementation - Softcover

Wright, Steve

Softcover

ISBN 10: 1905356455 ISBN 13: 9781905356454

Publisher: It Governance Ltd, 2008

Synopsis

The objective of this practical guide is to give organisations practical advice and tips on the entire Payment Card Industry (PCI) implementation process. It provides a roadmap, helping organisations to navigate the broad and sometimes confusing Payment Card Industry Data Security Standard (PCI DSS) v1.1 and shows them how to build and maintain a sustainable PCI compliance programme. Although the guide starts with sections on why and what is PCI, it is not intended to replace the 'publicly available' PCI information. Thus, it is designed to provide guidance and support for project managers, executives and security officers who have been tasked with ensuring PCI compliance and don't know where to start. This book looks to serve those who have been given the responsibility of PCI; it does not attempt to provide all the answers. It should be read, absorbed and digested, only with a good helping of other PCI 'publicly available' information. In other words - it will help an organisation ge

About this title

About the Author

Steve Wright is a 'security' subject matter expert in the areaof information security and governance with years ofexperience in design and implementation of securityarchitecture and information security governanceframeworks. He also founded the UK ISO27002 informationsecurity knowledge portal - www.ISO27002.Info.Steve has successfully executed information security projectsfor a number of United Kingdom government agencies andhas also provided information security consulting to a largenumber of government supporting organisations. In thecommercial sector he has completed many consultingengagements for global clients, including business processand outsourcing providers, manufacturing, telecoms and ITproviders, financial services and healthcare sectors.He is currently responsible for managing a successfulsecurity management practice (information assurance andgovernance). This includes managing eight principal, seniorand junior consultants within the functions of audit, risk,compliance and standards implementation (e.g. PCI,ISO27001 and IMS), incident and investigations.Steve is also the Director for the Information RiskManagement practitioner course for Siemens InsightConsulting and is responsible for delivering this and manyother British Computer Society ISEB training courses (e.g.Certificate in Information Security Management Principles).Steve has dual expertise as a hybrid technical and businessinformation security consultant with a pragmatic and holisticapproach to the management of information security.

Review

This book would be very helpful to companies trying to understand what is required as well as providing guidance throughout the complicated process. --Gary Palgon, VP Product Management, Nubridges.com

If you are an experienced information security professional or project manager tasked with your first PCI DSS implementation, this book (coupled with PCI DSS itself and various other sources of guidance) will be a worthwhile starting point and companion on your journey to compliance. It is good value and easy to read, providing many pragmatic tips. --Gary Hinson, noticebored.com

Edition details

• Publisher: It Governance Ltd
• Publication date: 2008
• Language: English
• ISBN 10: 1905356455
• ISBN 13: 9781905356454
• Binding: Paperback
• Number of pages: 188