PCI DSS 3.1: The Standard That Killed SSL

by Branden R. Williams

Overview

PCI DSS has recently updated its standard to 3.1. While the changes are fairly minor in nature, there are massive implications to companies relying on SSL as a scope reducing tool inside their enterprise. This update book goes through the specific changes to PCI DSS 3.1, and includes new case studies that discuss the specific implications for making the change to 3.1. This concise supplement also includes a detailed explanation of each changed requirement and how it will impact your environment. PCI Compliance, 3.1 Addendum serves as an update to Syngress’ comprehensive reference volume PCI Compliance, Fourth Edition.

• Includes all system updates to the new version of PCI DSS 3.1
• Details and describes each update and enhancement
• Includes case studies that illustrate when and where these changes will effect and improve your enterprise

Product Details

ISBN-13:	9780128046494
Publisher:	Elsevier Science
Publication date:	09/14/2015
Sold by:	Barnes & Noble
Format:	eBook
Pages:	44
File size:	2 MB

About the Author

Branden R. Williams (CISSP, CISM, CPISA, CPISM) leads an information security practice in a Global Security Consulting group at a major security firm in Flower Mound, TX and teaches in the NSA Certified Information Assurance program at the University of Dallas's Graduate School of Management. Branden has been involved in information technology since 1994, and focused on information security since 1996. He started consulting on payment security in 2004, assessing companies against the Visa CISP and Mastercard SDP programs. He has a Bachelors of Business Administration in Marketing from the University of Texas, Arlington, and a Masters of Business Administration in Supply Chain Management and Market Logistics from the University of Dallas.

Branden publishes a monthly column in the ISSA Journal entitled "Herding Cats," and authors a blog at http://www.brandenwilliams.com/.

Table of Contents

Chapter 1 - Chapter 1: Introduction

Chapter 2 - Chapter 2: The Death of SSL

Chapter 3 - Chapter 3: Third Parties

Chapter 4 - Chapter 4: Technical Testing

Chapter 5 - Chapter 5: Other Miscellaneous Changes

Chapter 6 - Chapter 6: Final Thoughts