Home
Topics
Regulations and compliance
PCI DSS: Audits and requirements
PCI DSS: Best practices for compliance

PCI DSS: Best practices for compliance

PCI DSS: Best practices for compliance

Date: Mar 31, 2009

Compliance with PCI DSS is an ongoing issue for financial-services firms: What do you need to know to make sure you are handling data securely?

In the second part of this video series, learn about the greatest challenges to PCI compliance, as well as dealing with application security for compliance, encryption and compensating controls.

Part one: PCI DSS: The structure of a standard
Part two: PCI DSS: Best practices for compliance

About the speaker:
Diana Kelley is the founder of SecurityCurve, a consulting group. She has extensive experience creating secure network architectures and business solutions for large corporations and delivering strategic, competitive knowledge to security software vendors.

More on PCI DSS: Audits and requirements

PayPal CISO: Laws must foster better cybersecurity information sharing
VIDEO - PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
PCI virtualisation: With new guidelines, compliance may be harder
News - New guidelines on virtualisation issued by the PCI SSC show PCI compliance is possible within a virtualised environment, but may not be feasible.
( Jun 14, 2011 )
tokenization
Definition - Tokenization is the process of replacing sensitive data with unique identification symbols that retain all the essential information about the data without compromising its security.
PAN truncation and PCI DSS compliance
Tip - What do Visa's PAN truncation guidelines mean for merchants and their acquiring banks? Security experts Ed Moyle and Diana Kelley provide analysis.
Visa: Banks shouldn't force merchants to store full card data
News - Visa clarifies its rules and says acquirers and issuers must accept truncated numbers for dispute resolution.
( Jul 15, 2010 )
Download presentations from Financial Information Security Decisions 2010
Feature - Learn from the industry's leading information security experts who gathered to share proven security strategies. If you couldn't make it to New York City for the event, you can catch up here.

Back to top

More from Related TechTarget Sites

Security
Cloud Security
Consumerization
SMB Security
Security AU
Security IN
Computer Weekly

Security
- Case study: CDI launches aviation company DLP program on short runway
  
  Technology services company CDI-Aerospace used a Verdasys DLP solution to manage third-party risk for a major aviation client.
- IT certification guide: Vendor-specific information security certifications
  
  Experts Ed Tittel and Mary Lemons provide a 2013 overview of vendor-specific information security certifications available.
- Introduction: Vendor-neutral security certifications for your career path
  
  Ed Tittel and Mary Lemons offer the definitive primer for vendor-neutral security certifications in 2013.
Cloud Security
- AWS FedRAMP certification fast-tracks Amazon cloud for U.S. government
  
  AWS becomes the biggest cloud provider to earn FedRAMP certification, easing the transition to AWS for U.S. government agencies.
- For cloud backup and disaster recovery, bandwidth proves problematic
  
  When it comes to cloud backup and disaster recovery, organizations are holding back due to insufficient bandwidth and lengthy recovery times.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Consumerization
- What to look for in business cloud storage and file-sharing services
  
  Picking business cloud storage and file-sharing services is tough, but there are a lot of options to choose from, including on-premises services.
- Citrix XenMobile combines MDM, MAM, file-sharing for mobile management
  
  Citrix users say the company's unified enterprise mobility management product, XenMobile, may make it easier to deliver business applications to on-the-go users.
- Mobile adoption still lags behind vendor hype
  
  Mobility management is evolving by leaps and bounds, but some companies haven’t even put their mobile adoption plans in place.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- A CIO's five-point plan for managing endpoint security
  
  Niel Nickolaisen offers a five-point solution for managing endpoint security for the hyper-connected enterprise -- starting with data governance.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
Computer Weekly
- Government reveals failing projects
  
  Government has published a report detailing the status of 191 major projects worth £353bn, in which eight projects were red flagged
- Bolton and Wigan get PSN in £47m outsourcing deal
  
  Bolton and Wigan councils have signed a seven-year £47m outsourcing contract, which will deliver a ‘PSN ready’ network to the region.
- SAP’s Sikka takes innovation lead as SuccessFactors founder departs
  
  SAP has announced a leadership reshuffle in line with its agenda of in-memory database Hana, cloud and mobile. Sikka steps up, SuccessFactors’ Dalgaard steps down

All Rights Reserved,Copyright 2008 - 2013, TechTarget