Auditing Your Payment Card (Debit, Credit & Prepaid) Processes, Systems and Applications: A Practical PCIDSS Compliant Audit Program for Issuers, Card Brands, Acquirers, Processors & Switches - [$30]

payment_cards
core banking app

Given emerging threats to the global payment card business especially for card-not-present transactions, which have been marred with fraudulent activities, there is need for organizations that collect, process, store and transmit cardholder information to be Payment Card Industry Data Security Standard (PCIDSS) compliant in order not to become a loose end for the thriving fraudulent activities. Stolen payment card records via unsecured applications, servers and/or networks has led to huge financial losses, reputational damages and litigations against financial institution, card issuers, acquirers or switches/processors may be found to be negligent or cases that is no fault of theirs. Insurance companies are not also left out and have ended up paying huge damages to cardholders and financial institutions that transferred their risk accordingly. Therefore, it is important for all stakeholders who handle cardholder information in the course of their business to improve their processes as well as comply with relevant requirements of (PCIDSS). Enforcement of PCIDSS requirement by regulatory institutions and operators within the payment card sector cannot be overemphasized. As such, this material provided the reader with test procedures that will ensure compliance with PCIDSS requirement. You will find a comprehensive audit procedure that will guide you on those things to look out for during the subject mentioned audit.

core banking app

This material will among other things look at control issues and vulnerabilities associated with payment card (debit, credit and prepaid) processes, systems and applications and how they can be mitigated. It provided a comprehensive audit checklist for PCIDSS requirements and how to practically verify the existence of necessary controls and practices that will show compliance with the requirements. Particular attention will be paid to the following areas: policies and procedures guide the operation of card business, card brand, processors and switch payment policies, change management, application security (Postilion realtime, Post Office, Post Card, Transware/TWCMS, ITC, FIMI, EMP, etc), database security, card operations (priming, production, stocking & distribution), data backup and redundancy/resilience, vendor/third party service management (card personalizaton vendors, switches, processors, acquirers, issues, etc), acquiring and terminal security, encryption key management, vulnerability assessment and management, infrastructure/server security (operating systems security), credit card portfolio management, network security, instant card and PIN issuance.


Customer Reviews System Oxley Technologies
Star Rating Oxley Technologies


Back To Information and Cyber Security Jobs

Learn More About Our Valuable IT Audit Programs/Checklists

Learn More About Our Valuable Risk Assessment & Treatment Templates

Learn More About Leading Practices in Internal Audit Function



IT Audit, IT Risk and Cyber Security eBooks By Nwabueze Ohia



Announcement: Our Book "Auditing Your Information Systems and IT Infrastructure" made it to the Best Database Auditing Books of All Time Ranking By BookAuthority

The best Database Auditing books of all time

Auditing Your Information Systems and IT infrastructure: Practical Audit Programs/Checklists for Internal AuditorsGet Now
IT Infrastructure Risk & Vulnerability Library: A Consolidated Register of Operational & Technology Infrastructure Vulnerabilities for IT Assurance ProfessionalsGet Now
Auditing Your Payment Cards Processes, Systems and Applications: A Step By Step PCIDSS Compliance Audit Program For Brands, Issuers, Acquirers, ProcessorsGet Now
Auditing Your Windows Infrastructure, Intranet And Internet Security: A Practical Audit Program for Assurance ProfessionalsGet Now

Popular Articles

Remote access software are tools used to access or take full control of computing systems from a remote location either to provide support, access files...Learn More
Investing in Information Technology is pivotal to the success of a business and realization of enterprise goals/objectives. To create value for the business using IT.Learn More
Fintech applications such as Online Banking has disrupted the traditional "brick and mortar" banking that we all have been accustomed to over the years. Online Banking application brought about easyLearn More
Audit management software are used to automate the process of auditing. Most standardized audit management software come handy with good audit process automation....Learn More
The 21st century as the information/digital age has presented numerous challenges and opportunities for humanity. From widespread industrial revolution to notable advances in IT.Learn More
The Central Bank of Nigeria (CBN) recently issued a revised circular on the regulatory framework for Unstructured Supplementary Service Data (USSD) for financialLearn More
Cloud computing is the practice of using network of remote computing infrastructures hosted on the Internet to store, manage, and process data for end users....Learn More
Privilege access mgt is one of the critical elements of user access mgt for every organization & building controls around them is vital for security of information/IT assets.Learn More
Cybersecurity threats and attacks are a real-world problem today with thousands of organizational networks and web facing applications being compromised dailyLearn More
Mobile hacking is an exciting field for cybersecurity enthusiast and at the same time lucrative for hackers. This is given significant rise in the number of mobileLearn More
To ensure the security and performance of application database, it is best to adopt security baselines (a.k.a. minimum security requirements) in addition to other operational controlsLearn More
The factor to consider most in determining the cost of vulnerability assessment is the complex nature of client organization & network environmentLearn More
Management systems certifications are tools that helps organziations meet stakeholders requirements (customer, regulatory & legal), reinforce market leadership.Learn More
Protecting Automated Teller Machine (ATM) network end-to-end requires layered approach to security (implementing security at ATM endpoints, physical and logical network)Learn More