PCI Compliance

Branden R. Williams (CISSP, CISM, CPISA, CPISM) leads an information security practice in a Global Security Consulting group at a major security firm in Flower Mound, TX and teaches in the NSA Certified Information Assurance program at the University of Dallas's Graduate School of Management. Branden has been involved in information technology since 1994, and focused on information security since 1996. He started consulting on payment security in 2004, assessing companies against the Visa CISP and Mastercard SDP programs. He has a Bachelors of Business Administration in Marketing from the University of Texas, Arlington, and a Masters of Business Administration in Supply Chain Management and Market Logistics from the University of Dallas.Branden publishes a monthly column in the ISSA Journal entitled "Herding Cats," and authors a blog at http://www.brandenwilliams.com/. Dr. Anton Chuvakin is a recognized security expert in the field of logmanagement and PCI DSS compliance. He is an author of the books "Security Warrior" and "PCICompliance" and has contributed to many others, while also publishing dozens of papers on log management, correlation, data analysis, PCI DSS, and security management. His blog(http://www.securitywarrior.org) is one of the most popular in the industry.Additionaly, Anton teaches classes and presents at many security conferences across the worldand he works on emerging security standards and serves on the advisory boards ofseveral security start-ups. Currently, Anton is developing his security consulting practice, focusing on logging and PCI DSS compliance for security vendors and Fortune 500 organizations.Anton earned his Ph.D. from Stony Brook University.

About PCI and This Book
Introduction to Fraud, ID Theft, and Regulatory mandates
Why PCI is Here
Determining and Reducing the PCI Scope
Building and Maintaining a Secure Network
Strong Access Controls
Protect Cardholder Data
Using Wireless Networking
Vulnerability Management and Testing
Logging Events and Monitoring the Cardholder Data Environment
Cloud and Virtualization
Mobile
PCI DSS for the Small Business
Managing PCI DSS Projects to Achieve Compliance
Don't Fear the Assessor
The Art of Compensating Control
So You're Compliant, Now What?
Emerging Technology and Alternative Payment Schemes
PCI DSS Myths and Misconceptions