PCI DSS Version 4.0

Stephen Hancock is a highly experienced cyber security consultant and auditor. He has been a PCI Qualified Security Assessor for more than 10 years. He has advised on PCI DSS and conducted assessments internationally for many clients ranging from multinational retailers to start-up fintech companies and payment service providers. Stephen has been involved in developing and delivering training courses for PCI DSS and ISO 27001, and holds a number of information security qualifications.

• Chapter 1: What is the Payment Card Industry Data Security Standard (PCI DSS)?Chapter 2: High-profile cardholder breachesChapter 3: What is the scope of the PCI DSS?Chapter 4: Compliance and compliance programmesChapter 5: Consequences of a breachChapter 6: How do you comply with the requirements of the Standard?Chapter 7: Maintaining complianceChapter 8: PCI DSS – the StandardChapter 9: Aspects of PCI DSS complianceChapter 10: The PCI self-assessment questionnaire (SAQ)Chapter 11: Procedures and qualificationsChapter 12: The PCI DSS and ISO/IEC 27001Chapter 13: The Software Security FrameworkChapter 14: PIN Transaction Security (PTS)Chapter 15: Point-to-point encryption (P2PE)Chapter 16: Software-based PIN entry on commercial off-the-shelf (COTS) devicesFurther reading