Ready to be published? LXer is read by around 350,000 individuals each month, and is an excellent place for you to publish your ideas, thoughts, reviews, complaints, etc. Do you have something to say to the Linux community?
This article is going to tell you how to institute 'defense in depth' to ensure PCI compliance on a Linux platform. Before we go ahead with the details, you'll obviously want to know what defense in depth actually means. Now the entire basis of defense in depth is that your integral server has layer upon layer of security that ensures that intrusion is almost impossible.
This article is going to tell you how to institute 'defense in depth' to ensure PCI compliance on a Linux platform. Before we go ahead with the details, you'll obviously want to know what defense in depth actually means. Now the entire basis of defense in depth is that your integral server has layer upon layer of security that ensures that intrusion is almost impossible.
Things the author left out
-Know where your cardholder data lives. Make sure every connection to that system is actually needed.
-Make sure your cardholder data is not getting moved to insecure systems.
-Educate your user community on the consequences of a breach.
-Monitor and audit your system configuration rigorously.
-Have and use a change control methodology.
Quoting:Educate your user community on the consequences of a breach.
Including the clear, unqualified statement that anyone found guilty of abusing access to information will be handed over to the law enforcement authorities, no exceptions.
Preferably followed by a demand for direct affirmation of same, from the one or two audience members who have that "I really have better ways to spend my time" look on their faces. They don't have better ways to spend their time. Call them out on their lackadaisical attitude, and make it clear that such an attitude has no place in dealing with confidential information.
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Dave