Mastering PCI

Untangle the complexities of Payment Card Industry (PCI) compliance with Kris Hermans' comprehensive guide, "Mastering PCI".

The Payment Card Industry Data Security Standard (PCI DSS) is a vital security standard for organizations that handle branded credit cards. In "Mastering PCI", Kris Hermans, a leading expert in cybersecurity and data protection, provides an in-depth guide to understanding, implementing, and auditing PCI compliance.

What's Inside:

1. Introduction
1. Understanding PCI Security Standards
2. The Importance of PCI Compliance
3. An Overview of the PCI DSS
2. Getting Started
1. Assessing Your PCI DSS Scope
2. Identifying Your Merchant Level
3. Assembling Your PCI Compliance Team
3. Building and Maintaining a Secure Network
1. Installing and Configuring Firewalls
2. Managing Vendor-Supplied Defaults
3. Securing System and Network Architecture
4. Protecting Cardholder Data
1. Data Encryption and Key Management
2. Tokenization and Data Masking
3. Secure Data Transmission and Storage
5. Implementing Strong Access Controls
1. Developing a Role-Based Access Control System
2. Managing User Credentials and Authentication
3. Implementing Two-Factor Authentication
6. Regularly Monitoring and Testing Networks
1. Intrusion Detection and Prevention Systems
2. Log Management and Monitoring
3. Vulnerability Scanning and Penetration Testing
7. Maintaining an Information Security Policy
1. Developing a Comprehensive Security Policy
2. Incident Response Planning
3. Security Awareness Training and Education
8. Preparing for PCI DSS Audits
1. Understanding the PCI DSS Audit Process
2. Collecting and Documenting Evidence
3. Working with Qualified Security Assessors (QSAs)
4. Audit checklist
9. Addressing PCI Compliance Challenges
1. Managing Risk in a Changing Threat Landscape
2. Addressing Compliance in Cloud Environments
3. Navigating Complex Regulatory Environments
10. Ensuring Continuous Compliance
1. Monitoring and Updating Your Security Controls
2. Adapting to Evolving PCI DSS Requirements
3. Establishing a Security-First Culture
11. Conclusion
1. The Future of PCI Security and Compliance
2. Key Takeaways and Next Step

About the author:

Kris Hermans is a renowned expert in cybersecurity and data protection with over two decades of experience. Known for his clear and pragmatic approach, Kris has been instrumental in guiding organizations towards PCI DSS compliance. He shares his insights and expertise through consulting, lecturing, and writing.