Branden R. Williams - PCI Compliance, Third Edition: Understand and Implement Effective PCI Data Security Standard Compliance

Branden R. Williams (CISSP, CISM) is a CTO at RSA, the security division of EMC and represents RSA on the PCI Board of Advisors. He has been involved in information technology since 1994 and has focused on information security since 1996. He started consulting on payment security in 2004, assessing companies against the Visa CISP and MasterCard SDP programs. He has a Bachelors of Business Administration in Marketing from the University of Texas, Arlington, and a Masters of Business Administration in Supply Chain Management and Market Logistics from the University of Dallas.

Branden spent several years as an Adjunct Professor at the University of Dallas, Graduate School of Management, and is an ISSA Fellow. He publishes a monthly column in the ISSA Journal entitled Herding Cats and authors a blog at www.brandenwilliams.com/.

Dr. Anton A. Chuvakin is a recognized security expert in the field of log management, SIEM and PCI DSS compliance. Anton is the co-author of Security Warrior (ISBN: 978-0-596-00545-0) and a contributing author to Know Your Enemy: Learning About Security Threats, Second Edition (ISBN: 978-0-321-16646-3); Information Security Management Handbook, Sixth Edition (ISBN: 978-0-8493-7495-1); Hackers Challenge 3: 20 Brand-New Forensic Scenarios & Solutions (ISBN: 978-0-072-26304-6); OSSEC Host-Based Intrusion Detection Guide (Syngress , ISBN: 978-1-59749- 240-9); and others.

Anton has published dozens of papers on log management, correlation, data analysis, PCI DSS, security management, and other security subjects. His blog, www.securitywarrior.org, was one of the most popular in the industry. In addition, Anton taught classes and presented at many security conferences across the world; He recently addressed audiences in the United States, United Kingdom, Singapore, Spain, Russia, and other countries. He worked on emerging security standards and served on the advisory boards of several security start-ups. Until recently, Anton ran his own consulting firm, Security Warrior. Prior to that, he was formerly a Director of PCI Compliance Solutions at Qualys and as Chief Logging Evangelist at LogLogic, tasked with educating the world about the importance of logging for security, compliance, and operations. Before LogLogic, Anton was employed by a security vendor in a strategic product management role. Anton earned his Ph.D. degree from Stony Brook University.

Technical Editor

Derek Milroy(CISSP, CISA) Derek Milroy is a corporate security professional that has been implementing security in corporate environments, as both an internal employee and as a consultant, for the past ten plus years. His main areas of focus include implementing: Windows Hardening (also Forest/Domain/GPO architectures), Vulnerability Management, Patch Management, Log Management/SIM/SEIM, and Intrusion Prevention technologies. He is a former QSA and has also performed ISO 72001/27002 and NIST 800-53A assessments.