Foreword

APT. Cybercrime. Hacktivism. PCI. Those are a few of the subjects that keep security leaders up at night. If you are wondering how PCI ended up on that short list and why it may cause bouts of insomnia, simply ask someone who has to deal with PCI DSS (Payment Card Industry Data Security Standard) assessments on a regular basis and you are guaranteed to receive strong responses. Yelling matches between security leaders and their PCI assessors over terms such as “segmentation,” “isolation,” “unrecoverable,” and “significant change” have become all too commonplace.
There is little argument that the prescriptive nature and detailed requirements of the DSS are a good guide for security professionals to benchmark and improve immature information ...

Get PCI Compliance, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.