Kali Linux 2018: Assuring Security by Penetration Testing - Fourth Edition

Summary

In this chapter, we were introduced to the Payment Card Industry Data Security Standard (PCI DSS) and its goals and requirements for organizations that must be PCI DSS-compliant. We also looked at the various levels of compliance required, depending on the volume of payment card transactions processed yearly. We also learned about the importance of segmentation and its impact on PCI DSS assessments, and then moved on to a detailed look at the scoping process.

Toward the end of the chapter, we learned that only qualified and experienced professionals should be authorized to carry out PCI DSS self-assessments, and also that a PCI DSS ASV must be hired to perform annual external PCI DSS assessments. Lastly, we recapped various tools ...