PCI Compliance, 2nd Edition

Index

A

Access

need-to-know for,

66

principle of least privilege for,

66

for user, number of,

66–67

user ID for,

67

Access control

implementing,

297

POSIX,

89–91

principle

data availability,

65

data confidentiality,

64

data integrity,

65

Access lists (ACLs),

77, 265, 284, 285

Access point (AP),

138

Account lockout policy, configuring,

86

in Active Directory,

80

Accounts, deletion of unnecessary,

51

ACLs.

seeAccess lists

Acquiring bank,

18

Active Directory.

seeWindows Active Directory

Aircrack-ng,

148, 150

American Express,

25

Antivirus software, deploying,

164, 165, 323

Apache web server,

210

Applicability of PCI DSS,

19, 319

Application protocol-based intrusion detection system (APIDS),

48

Application vulnerability assessment,

156

Application vulnerability scanner,

156

Application-layer vulnerabilities, ...