PCI Change Detection: Thinking Beyond the Checkbox
Download as PPTX, PDF2 likes12,224 views
The document outlines key security requirements and best practices for protecting cardholder data, as emphasized by Glenn Rogers and Tim Erlin. It highlights the importance of maintaining a secure network, implementing strong access control measures, and regularly monitoring security systems. Additionally, it references compliance with PCI DSS 3.2 and promotes continuous monitoring and risk reduction strategies.
1 of 14
Downloaded 47 times
More Related Content
What's hot (20)
Ad
Viewers also liked (20)
Ad
Similar to PCI Change Detection: Thinking Beyond the Checkbox (20)
More from Tripwire (20)
Recently uploaded (20)
PCI Change Detection: Thinking Beyond the Checkbox
- 2. Glenn Rogers CIO Girl Scouts of Northern California Tim Erlin Dir. IT Risk and Security Strategist Tripwire
- 9. 1: Build and Maintain a Secure Network 2: Protect Cardholder Data 3: Maintain a Vulnerability Management Program 4: Implement Strong Access Control Measures 5: Regularly Monitor and Test Networks 6: Maintain an Information Security Policy Requirement 1: Install and maintain a firewall configuration to Protect Cardholder Data Requirement 3: Protect stored cardholder data Requirement 5: Protect all systems against malware and regularly update anti- virus software or programs Requirement 7: Restrict access to cardholder data by business need to know Requirement 10: Track and monitor all access to network resources and cardholder data Requirement 12: Maintain a policy that addresses information security for all personnel Requirement 2: Do not use vendor- supplied defaults for system passwords and other security parameters Requirement 4: Encrypt transmission of cardholder data across open, public networks Requirement 6: Develop and maintain secure systems and applications Requirement 8: Identify and authenticate access to system components Requirement 11: Regularly test security systems and processes Requirement 9: Restrict physical access to cardholder data Validates Provides Supports
- 11. Tripwire and PCI DSS 3.2
- 12. Continuous Monitoring Risk Reduction Threat Detection and Response Operational Cost Reduction INTEGRATION AUTOM ATION CONTEXT