國立高雄大學圖資館 |

Language: English

Back

The definitive guide to PCI DSS Version 4documentation, compliance, and management /

Record Type:	Electronic resources : Monograph/item
Title/Author:	The definitive guide to PCI DSS Version 4by Arthur B. Cooper Jr. ... [et al.].
Reminder of title:	documentation, compliance, and management /
other author:	Cooper, Arthur B.
Published:	Berkeley, CA :Apress :2023.
Description:	1 online resource (xxiv, 253 p.) :ill., digital ;24 cm.
Contained By:	Springer Nature eBook
Subject:	Credit cardsSecurity measures.
Online resource:	https://doi.org/10.1007/978-1-4842-9288-4
ISBN:	9781484292884$q(electronic bk.)

The definitive guide to PCI DSS Version 4documentation, compliance, and management /
The definitive guide to PCI DSS Version 4documentation, compliance, and management /[electronic resource] :by Arthur B. Cooper Jr. ... [et al.]. - Berkeley, CA :Apress :2023. - 1 online resource (xxiv, 253 p.) :ill., digital ;24 cm.

Chapter 1. A Brief History of PCI -- Chapter 2. Install and Maintain Network Controls -- Chapter 3. Apply Secure Configurations to all System Components- Chapter 4. Protect Stored Account Data -- Chapter 5. Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks -- Chapter 6. Protect All Systems and Networks from Malicious Software -- Chapter 7. Develop and Maintain Secure Systems and Software -- Chapter 8. Restrict Access to System Components and Cardholder Data by Business Need to Know -- Chapter 9. Identify Users and Authenticate Access to System Components -- Chapter 10. Restrict Physical Access to Cardholder Data -- Chapter 11. Log and Monitor All Access to System Components and Cardholder Data -- Chapter 12. Test Security of Systems and Networks Regularly -- Chapter 13. Support Information Security with Organizational Policies and Programs -- Chapter 14. How To Read a Service Provider Attestation of Compliance -- Chapter 15. Segmentation and tokenization -- Chapter 16. The Customized Approach, Compensating Controls, and the Targeted Risk Analysis.

This book is your go-to reference on how to achieve PCI compliance. With more than 400 PCI requirements, the updated PCI Data Security Standard (PCI DSS) v4.0 does not detail the specific documentation that a PCI auditor-known as a Qualified Security Assessor (QSA)-needs to know. This book is the first reference to detail the specific documentation needed for every PCI requirement. The authors provide real-world examples of complying with the 12 main PCI requirements and clarify many of the gray areas within the PCI DSS. Any merchant or service provider that stores, processes, or transmits credit card data must comply with the PCI Data Security Standard. PCI DSS 1.0 was first published in 2004, yet many of those tasked with PCI compliance still encounter difficulties when trying to make sense of it. PCI DSS version 4 was published in March 2022, and at 360 pages, it has numerous additional requirements, leaving many people struggling to know what they need to do to comply. PCI DSS v4.0 has a transition period in which PCI DSS version 3.2.1 will remain active for two years from the v4.0 publication date. Although the transition period ends on March 31, 2024, and may seem far away, those tasked with PCI compliance will need every bit of the time to acquaint themselves with the many news updates, templates, forms, and more, that PCI v4.0 brings to their world. You will: Know what it takes to be PCI compliant Understand and implement what is in the PCI DSS Get rid of cardholder data Have everything you need to know about segmenting your cardholder data network Know what documentation is needed for your PCI compliance efforts Leverage real-world experience to assist PCI compliance work.

ISBN: 9781484292884$q(electronic bk.)

Standard No.: 10.1007/978-1-4842-9288-4doiSubjects--Topical Terms:

845497
Credit cards
--Security measures.

LC Class. No.: HG3755.7

Dewey Class. No.: 332.1788028558

The definitive guide to PCI DSS Version 4documentation, compliance, and management /
LDR:03942nmm a2200349 a 4500 001 638283
003 DE-He213
005 20230525090118.0
006 m d
007 cr nn 008maaau
008 230921s2023 cau s 0 eng d
020 $a 9781484292884$q(electronic bk.)
020 $a 9781484292877$q(paper)
024 7 $a 10.1007/978-1-4842-9288-4 $2 doi
035 $a 978-1-4842-9288-4
040 $a GP $c GP
041 0 $a eng
050 4 $a HG3755.7
072 7 $a UR $2 bicssc
072 7 $a UTN $2 bicssc
072 7 $a COM053000 $2 bisacsh
072 7 $a UR $2 thema
072 7 $a UTN $2 thema
082 0 4 $a 332.1788028558 $2 23
090 $a HG3755.7 $b .D313 2023
245 0 4 $a The definitive guide to PCI DSS Version 4 $h [electronic resource] : $b documentation, compliance, and management / $c by Arthur B. Cooper Jr. ... [et al.].
260 $a Berkeley, CA : $b Apress : $b Imprint: Apress, $c 2023.
300 $a 1 online resource (xxiv, 253 p.) : $b ill., digital ; $c 24 cm.
505 0 $a Chapter 1. A Brief History of PCI -- Chapter 2. Install and Maintain Network Controls -- Chapter 3. Apply Secure Configurations to all System Components- Chapter 4. Protect Stored Account Data -- Chapter 5. Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks -- Chapter 6. Protect All Systems and Networks from Malicious Software -- Chapter 7. Develop and Maintain Secure Systems and Software -- Chapter 8. Restrict Access to System Components and Cardholder Data by Business Need to Know -- Chapter 9. Identify Users and Authenticate Access to System Components -- Chapter 10. Restrict Physical Access to Cardholder Data -- Chapter 11. Log and Monitor All Access to System Components and Cardholder Data -- Chapter 12. Test Security of Systems and Networks Regularly -- Chapter 13. Support Information Security with Organizational Policies and Programs -- Chapter 14. How To Read a Service Provider Attestation of Compliance -- Chapter 15. Segmentation and tokenization -- Chapter 16. The Customized Approach, Compensating Controls, and the Targeted Risk Analysis.
520 $a This book is your go-to reference on how to achieve PCI compliance. With more than 400 PCI requirements, the updated PCI Data Security Standard (PCI DSS) v4.0 does not detail the specific documentation that a PCI auditor-known as a Qualified Security Assessor (QSA)-needs to know. This book is the first reference to detail the specific documentation needed for every PCI requirement. The authors provide real-world examples of complying with the 12 main PCI requirements and clarify many of the gray areas within the PCI DSS. Any merchant or service provider that stores, processes, or transmits credit card data must comply with the PCI Data Security Standard. PCI DSS 1.0 was first published in 2004, yet many of those tasked with PCI compliance still encounter difficulties when trying to make sense of it. PCI DSS version 4 was published in March 2022, and at 360 pages, it has numerous additional requirements, leaving many people struggling to know what they need to do to comply. PCI DSS v4.0 has a transition period in which PCI DSS version 3.2.1 will remain active for two years from the v4.0 publication date. Although the transition period ends on March 31, 2024, and may seem far away, those tasked with PCI compliance will need every bit of the time to acquaint themselves with the many news updates, templates, forms, and more, that PCI v4.0 brings to their world. You will: Know what it takes to be PCI compliant Understand and implement what is in the PCI DSS Get rid of cardholder data Have everything you need to know about segmenting your cardholder data network Know what documentation is needed for your PCI compliance efforts Leverage real-world experience to assist PCI compliance work.
650 0 $a Credit cards $x Security measures. $3 845497
650 0 $a Credit cards $x Security measures $x Standards. $3 845498
650 1 4 $a Data and Information Security. $3 913130
700 1 $a Cooper, Arthur B. $3 945001
710 2 $a SpringerLink (Online service) $3 273601
773 0 $t Springer Nature eBook
856 4 0 $u https://doi.org/10.1007/978-1-4842-9288-4
950 $a Professional and Applied Computing (SpringerNature-12059)