Proactive / Continuous Compliance Approach to PCI DSS by Dr. Anton Chuvakin
Report
Anton ChuvakinFollow
Feb. 11, 2011•0 likes•855 views
Proactive / Continuous Compliance Approach to PCI DSS by Dr. Anton Chuvakin
Feb. 11, 2011•0 likes•855 views
Report
Technology
by Dr. Anton Chuvakin, SecurityWarrior, LLC Current compliance methods are reactive and do little to improve security. In place of annual audits and document-heavy processes, a new, Proactive/Continous Compliance model makes compliance an element of normal information security operations. Compliance is managed day to day and minute to minute, providing clear visibility of compliance posture at any given time. Efficiency is increased, costs are reduced and the annual audit becomes a simple formality. In this presentation we'll cover the requirements, capabilities and benefits of this new compliance model.
Anton ChuvakinFollow
Recommended
Log Standards & Future Trends by Dr. Anton ChuvakinAnton Chuvakin
SANS Webinar: The Future of Log Centralization for SIEMs and DFIR – Is the En...Anton Chuvakin
SOC Lessons from DevOps and SRE by Anton ChuvakinAnton Chuvakin
Hey SOC, Look LEFT! by Anton Chuvakin RSA 2023 BoothAnton Chuvakin
20 Years of SIEM - SANS Webinar 2022Anton Chuvakin
10X SOC - SANS Blue Summit Keynote 2021 - Anton ChuvakinAnton Chuvakin
More Related Content
More from Anton Chuvakin
Modern SOC Trends 2020Anton Chuvakin
Anton's 2020 SIEM Best and Worst Practices - in BriefAnton Chuvakin
Generic siem how_2017Anton Chuvakin
Tips on SIEM Ops 2015Anton Chuvakin
Five SIEM Futures (2012)Anton Chuvakin
RSA 2016 Security Analytics PresentationAnton Chuvakin
Recently uploaded
Empowering City ClerksOnBoard
Common WordPress APIs_ Settings APIJonathan Bossenger
Solving today’s Traffic Problems with Sustainable Ride Hailing SolutionOn Demand Clone
Brisbane MuleSoft Meetup 13 MuleSoft Maven and Managing Dependencies Part 1.pptxBrianFraser29
Recommendation Modeling with Impression Data at NetflixJiangwei Pan
Reward Innovation for long-term member satisfactionJiangwei Pan
Proactive / Continuous Compliance Approach to PCI DSS by Dr. Anton Chuvakin
- 10. Assign a unique ID to each person with computer access
- 29. Reduced cost over time
Editor's Notes
- “Clarified that identification of all locations of cardholder data should include instructions for configuring the underlying software to prevent inadvertent capture or retention of cardholder data”“Updated requirement to ensure that identified vulnerabilities are ranked according to risk.”
- See, How to STAY PCI DSS compliant:http://chuvakin.blogspot.com/2009/01/how-to-stay-compliant-or-ongoing-tasks.html
- PCI assessment case studyfrom Branden Williams (my co-author for “PCI Compliance” http://www.pcicompliancebook.info)
- Auditor-proof security SUCKS!
- Not getting daily compliance/security Process of complianceOperationalize – internalizeCompliance is seen as forced, not needed