PCI-for-Dummies.pdf

(2255 KB) Pobierz
Co m p lim en ts o f
U p d a te d f o r P CI DS S Ve r s i o n 2 . 0 !
P C I C o m p l i a n c e
Secure and protect
cardholder data
Sumedh Thakar
Terry Ramos
996560895.159.png
 
 
996560895.168.png
 
 
 
 
996560895.017.png
 
 
 
 
 
 
 
 
 
 
996560895.125.png 996560895.136.png 996560895.147.png 996560895.157.png
 
 
 
 
 
996560895.158.png
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
996560895.160.png
 
 
996560895.161.png 996560895.162.png 996560895.163.png 996560895.164.png 996560895.165.png 996560895.166.png 996560895.167.png
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
996560895.001.png
 
 
996560895.002.png 996560895.003.png
 
 
996560895.004.png
 
 
 
 
 
 
 
 
 
 
 
996560895.005.png 996560895.006.png 996560895.007.png 996560895.008.png 996560895.009.png 996560895.010.png 996560895.011.png 996560895.012.png 996560895.013.png 996560895.014.png 996560895.015.png 996560895.016.png 996560895.018.png 996560895.019.png 996560895.020.png 996560895.021.png 996560895.022.png 996560895.023.png 996560895.024.png 996560895.025.png 996560895.026.png 996560895.027.png 996560895.028.png 996560895.029.png 996560895.030.png 996560895.031.png 996560895.032.png 996560895.033.png 996560895.034.png 996560895.035.png 996560895.036.png 996560895.037.png 996560895.038.png 996560895.039.png 996560895.040.png
996560895.041.png 996560895.042.png 996560895.043.png 996560895.044.png 996560895.045.png 996560895.046.png 996560895.047.png 996560895.048.png 996560895.049.png 996560895.050.png 996560895.051.png 996560895.052.png 996560895.053.png 996560895.054.png 996560895.055.png 996560895.056.png 996560895.057.png 996560895.058.png
 
PCI Compliance
FOR
DUMmIES
by Sumedh Thakar and
Terry Ramos
A John Wiley and Sons, Ltd, Publication
996560895.059.png 996560895.060.png 996560895.061.png 996560895.062.png 996560895.063.png 996560895.064.png 996560895.065.png 996560895.066.png 996560895.067.png 996560895.068.png 996560895.069.png 996560895.070.png 996560895.071.png 996560895.072.png 996560895.073.png 996560895.074.png 996560895.075.png 996560895.076.png 996560895.077.png 996560895.078.png 996560895.079.png 996560895.080.png 996560895.081.png 996560895.082.png 996560895.083.png 996560895.084.png 996560895.085.png 996560895.086.png 996560895.087.png 996560895.088.png 996560895.089.png 996560895.090.png 996560895.091.png 996560895.092.png 996560895.093.png 996560895.094.png 996560895.095.png 996560895.096.png 996560895.097.png 996560895.098.png 996560895.099.png 996560895.100.png 996560895.101.png 996560895.102.png 996560895.103.png 996560895.104.png 996560895.105.png 996560895.106.png
 
PCI Compliance For Dummies ®
Published by
John Wiley & Sons, Ltd
The Atrium
Southern Gate
Chichester
West Sussex
PO19 8SQ
England
Email (for orders and customer service enquires):
cs-books@wiley.co.uk
Visit our Home Page on www.wiley.com
Copyright © 2011 by John Wiley & Sons Ltd, Chichester, West Sussex, England
All Rights Reserved. No part of this publication may be reproduced, stored in a retrieval system or
transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning
or otherwise, except under the terms of the Copyright, Designs and Patents Act 1988 or under the
terms of a licence issued by the Copyright Licensing Agency Ltd, 90 Tottenham Court Road, London,
W1T 4LP, UK, without the permission in writing of the Publisher. Requests to the Publisher for per-
mission should be addressed to the Permissions Department, John Wiley & Sons, Ltd, The Atrium,
Southern Gate, Chichester, West Sussex, PO19 8SQ, England, or emailed to permreq@wiley.com, or
faxed to (44) 1243 770620.
Trademarks: Wiley, the Wiley Publishing logo, For Dummies, the Dummies Man logo, A Reference for
the Rest of Us!, The Dummies Way, Dummies Daily, The Fun and Easy Way, Dummies.com and related
trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in
the United States and other countries, and may not be used without written permission. All other
trademarks are the property of their respective owners. Wiley Publishing, Inc., is not associated with
any product or vendor mentioned in this book.
LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY : THE PUBLISHER, THE AUTHOR, AND
ANYONE ELSE INVOLVED IN PREPARING THIS WORK MAKE NO REPRESENTATIONS OR WAR-
RANTIES WITH RESPECT TO THE ACCURACY OR COMPLETENESS OF THE CONTENTS OF THIS
WORK AND SPECIFICALLY DISCLAIM ALL WARRANTIES, INCLUDING WITHOUT LIMITATION
WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE. NO WARRANTY MAY BE CREATED OR
EXTENDED BY SALES OR PROMOTIONAL MATERIALS. THE ADVICE AND STRATEGIES CON-
TAINED HEREIN MAY NOT BE SUITABLE FOR EVERY SITUATION. THIS WORK IS SOLD WITH
THE UNDERSTANDING THAT THE PUBLISHER IS NOT ENGAGED IN RENDERING LEGAL,
ACCOUNTING, OR OTHER PROFESSIONAL SERVICES. IF PROFESSIONAL ASSISTANCE IS
REQUIRED, THE SERVICES OF A COMPETENT PROFESSIONAL PERSON SHOULD BE SOUGHT.
NEITHER THE PUBLISHER NOR THE AUTHOR SHALL BE LIABLE FOR DAMAGES ARISING HERE-
FROM. THE FACT THAT AN ORGANIZATION OR WEBSITE IS REFERRED TO IN THIS WORK AS
A CITATION AND/OR A POTENTIAL SOURCE OF FURTHER INFORMATION DOES NOT MEAN
THAT THE AUTHOR OR THE PUBLISHER ENDORSES THE INFORMATION THE ORGANIZATION
OR WEBSITE MAY PROVIDE OR RECOMMENDATIONS IT MAY MAKE. FURTHER, READERS
SHOULD BE AWARE THAT INTERNET WEBSITES LISTED IN THIS WORK MAY HAVE CHANGED OR
DISAPPEARED BETWEEN WHEN THIS WORK WAS WRITTEN AND WHEN IT IS READ.
Wiley also publishes its books in a variety of electronic formats. Some content that appears in print
may not be available in electronic books.
ISBN: 978-0-470-74452-9
Printed and bound in Great Britain by Page Bros, Norwich
10 9 8 7 6 5 4 3
996560895.107.png
 
996560895.108.png 996560895.109.png 996560895.110.png 996560895.111.png 996560895.112.png 996560895.113.png 996560895.114.png 996560895.115.png 996560895.116.png 996560895.117.png 996560895.118.png 996560895.119.png 996560895.120.png 996560895.121.png 996560895.122.png 996560895.123.png 996560895.124.png 996560895.126.png 996560895.127.png 996560895.128.png 996560895.129.png 996560895.130.png 996560895.131.png 996560895.132.png 996560895.133.png 996560895.134.png 996560895.135.png 996560895.137.png 996560895.138.png 996560895.139.png 996560895.140.png 996560895.141.png 996560895.142.png 996560895.143.png 996560895.144.png 996560895.145.png 996560895.146.png 996560895.148.png 996560895.149.png 996560895.150.png
 
Introduction
W elcome to PCI Compliance For Dummies ! Compliance
with the Payment Card Industry (PCI) Data Security
Standard (DSS) is mandatory if your company stores,
processes, or transmits payment cardholder data. This book
is all about understanding PCI and how merchants can
comply with its requirements.
About This Book
This book simply explains the PCI Data Security Standard and
describes its requirements for compliance. After reading this
book you’ll know more about how to comply with the PCI
Data Security Standard.
Foolish Assumptions
In writing this book, we assume that you:
Are a merchant and know you have to comply with PCI
but aren’t sure what’s required or what you need to do.
Are familiar with information technology and networking.
Want to discover the easiest, most effective and direct
way to fulfill compliance requirements for PCI.
How to Use This Book
This book is divided into five succinct and easily-digestible parts:
Part I: Merchants: Cardholder Data Thieves Want You!
Start here if you need a primer on security risks faced by
merchants who accept payment cards.
Part II: Looking at the Big Picture of PCI Standards.
Understand the three PCI standards and how each
applies to merchants.
996560895.151.png 996560895.152.png 996560895.153.png 996560895.154.png 996560895.155.png 996560895.156.png
Zgłoś jeśli naruszono regulamin