PCI DSS A Pocket Guide – fifth edition

Description

An ideal introduction and a quick reference to PCI DSS version 3.2

All businesses that accept payment cards are prey for hackers and criminal gangs trying to steal financial information and commit identity fraud. The PCI DSS (Payment Card Industry Data Security Standard) exists to ensure that businesses process credit and debit card orders in a way that effectively protects cardholder data.

All organizations that accept, store, transmit, or process cardholder data must comply with the Standard; failure to do so can have serious consequences for their ability to process card payments.

Product overview

Co-written by a PCI QSA (Qualified Security Assessor) and updated to cover PCI DSS version 3.2, this handy pocket guide provides all the information you need to consider as you approach the PCI DSS. It is also an ideal training resource for anyone in your organization involved with payment card processing. Coverage includes:

• An overview of PCI DSS v3.2.
• A PCI self-assessment questionnaire (SAQ).
• Procedures and qualifications.
• An overview of the Payment Application Data Security Standard (PA-DSS).

Contents

1. What is the Payment Card Industry Data Security Standard (PCI DSS)?
2. What is the scope of the PCI DSS?
3. Compliance and compliance programmes
4. Consequences of a breach
5. How do you comply with the requirements of the Standard?
6. Maintaining compliance
7. PCI DSS – The Standard
8. Aspects of PCI DSS compliance
9. The PCI self-assessment questionnaire
10. Procedures and qualifications
11. The PCI DSS and ISO/IEC 27001
12. The Payment Application Data Security Standard (PA-DSS)
13. PIN transaction security (PTS)

About the authors

Customer Reviews

(9# of Ratings:)

Franc Schiphorst7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

Glad I got the new vsRisk and toolkit. Saves a lot of work and the support is great :-D

Mark Dearlove7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

I am happy with the help vsRisk has given me to progress the ISMS implementation process. The integration with the comprehensive documentation toolkit is an excellent feature. The documentation toolkit alone will save weeks/ months of work!

Greig Robertson7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

vsRisk was instrumental in helping us achieve our ISO27001:2013 certification.

James Ellis7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

Compared to Excel, vsRisk™ has an easy to use interface. The assessment scales and the risk acceptance criteria are an easy to understand and visual way to present risks to the people. vsRisk™ is a great way to manage and report your risks and present the acceptance criteria to the board for eventual sign off. vsRisk™ comes with complete piece of mind, we used the technical support on offer and the support we received was great.

Chris Beaumont7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

Edge Hill University's MSc in Information Security has been designed with a strong focus on professional practice, and we base it around international standards and certifications, so it made sense to use high quality (professional)software that is aligned with standards. We therefore selected vsRisk™ as a tool for students on the course since it is fully aligned with ISO27001.

Carol McCarthy7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

I found it easy to use…the tool was amazing for doing the job it said it would. I would love a similar tool for other ISO management systems say for ISO25999.

Manolis Vavousis7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

We recently purchased your combo product (pre written documentation + standards + vsRisk) and we are overall very pleased with the completeness of it. As a matter of fact we estimate to have completed our first ISMS project in less than two months from the day of purchase. The overall price was very cost effective... Concluding, we are very pleased with our purchase and we would definitely suggest the templates documentation to your customers.

A. Smith7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

This tool is comprehensively the best!

J Ellis7/24/2015

0 people found this comment helpful
0 did not

Was this comment helpful?

yes | no

We used it [vsRisk] for implementing ISO 27001 and it was pretty good. Pretty much every risk in there that you can think of!