PCI DSS Done RIGHT and WRONG by Anton Chuvakin and Branden Williams
Report
Anton ChuvakinFollow
Apr. 26, 2010•0 likes•1,407 views
4 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Check these out next
PCI DSS Done RIGHT and WRONG by Anton Chuvakin and Branden Williams
Apr. 26, 2010•0 likes•1,407 views
4 likes
Be the first to like this
Show More
views
Total views
0
On Slideshare
0
From embeds
0
Number of embeds
0
Report
Technology
Anton ChuvakinFollow
PCI DSS Done RIGHT and WRONG by Anton Chuvakin and Branden Williams
- Assign a unique ID to each person with computer access
Editor's Notes
- Myth: PCI is confusing and not specific!“We don’t know what to do, who to ask, what exactly to change”“Just give us a checklist and we will do it. Promise!”Reality: PCI DSS documents explain both what to do and how to validate it; take some time to read and understand it.<- Also, read our book on PCI! Reality: PCI DSS is basic, common sense, baseline security practice; it is only hard if you were not doing it before.It is no harder than running your business or IT – and you’ve been doing it!
- QSA shop = liabilityxfer
- Myth: PCI is confusing and not specific!“We don’t know what to do, who to ask, what exactly to change”“Just give us a checklist and we will do it. Promise!”Reality: PCI DSS documents explain both what to do and how to validate it; take some time to read and understand it.<- Also, read our book on PCI! Reality: PCI DSS is basic, common sense, baseline security practice; it is only hard if you were not doing it before.It is no harder than running your business or IT – and you’ve been doing it!
- Also: Lie to management about “we are NOT compliant – gimme budget!!”
- How to STAY compliant!