PCI Compliance

Understand and Implement Effective PCI Data Security Standard Compliance

Branden Williams, James Adamson, Branden R Williams

• Publisher: CRC Press
• Year: 2022
• Print ISBN: 9780367570033
• eBook ISBN: 9781000822342
• Edition: 5
• Topic: Computer Science
• Subtopic: Finance
• Index: Computer Science

The Payment Card Industry Data Security Standard (PCI DSS) is now in its 18th year, and it is continuing to dominate corporate security budgets and resources. If you accept, process, transmit, or store payment card data branded by Visa, MasterCard, American Express, Discover, or JCB (or their affiliates and partners), you must comply with this lengthy standard.

Personal data theft is at the top of the list of likely cybercrimes that modern-day corporations must defend against. In particular, credit or debit card data is preferred by cybercriminals as they can find ways to monetize it quickly from anywhere in the world. Is your payment processing secure and compliant? The new Fifth Edition of PCI Compliance has been revised to follow the new PCI DSS version 4.0, which is a complete overhaul to the standard. Also new to the Fifth Edition are: additional case studies and clear guidelines and instructions for maintaining PCI compliance globally, including coverage of technologies such as Kubernetes, cloud, near-field communication, point-to-point encryption, Mobile, Europay, MasterCard, and Visa. This is the first book to address the recent updates to PCI DSS and the only book you will need during your PCI DSS journey. The real-world scenarios and hands-on guidance will be extremely valuable, as well as the community of professionals you will join after buying this book.

Each chapter has how-to guidance to walk you through implementing concepts and real-world scenarios to help you grasp how PCI DSS will affect your daily operations. This book provides the information that you need in order to understand the current PCI Data Security Standards and the ecosystem that surrounds them, how to effectively implement security on network infrastructure in order to be compliant with the credit card industry guidelines, and help you protect sensitive and personally identifiable information. Our book puts security first as a way to enable compliance.

• Completely updated to follow the current PCI DSS version 4.0
• Packed with tips to develop and implement an effective PCI DSS and cybersecurity strategy
• Includes coverage of new and emerging technologies such as Kubernetes, mobility, and 3D Secure 2.0
• Both authors have broad information security backgrounds, including extensive PCI DSS experience

Table of contents

• Cover
• Half Title
• Title
• Copyright
• Contents
• Foreword
• Acknowledgments
• Authors
• Chapter 1 About PCI DSS and This Book
• Chapter 2 Introduction to Fraud, Identity Theft, and Related Regulatory Mandates
• Chapter 3 Why Is PCI Here?
• Chapter 4 Determining and Reducing Your PCI Scope
• Chapter 5 Building and Maintaining a Secure Network
• Chapter 6 Strong Access Controls
• Chapter 7 Protecting Cardholder Data
• Chapter 8 Using Wireless Networking
• Chapter 9 Vulnerability Management
• Chapter 10 Logging Events and Monitoring the Cardholder Data Environment
• Chapter 11 Cloud and Virtualization
• Chapter 12 Mobile
• Chapter 13 PCI for the Small Business
• Chapter 14 PCI DSS for the Service Provider
• Chapter 15 Managing a PCI DSS Project to Achieve Compliance
• Chapter 16 Don’t Fear the Assessor
• Chapter 17 The Art of Compensating Control
• Chapter 18 You’re Compliant, Now What?
• Chapter 19 Emerging Technology and Alternative Payment Schemes
• Chapter 20 PCI DSS Myths and Misconceptions
• Chapter 21 Final Thoughts
• Index by Requirement
• Alphabetical Index