{"id":4208,"date":"2024-08-27T08:30:29","date_gmt":"2024-08-27T06:30:29","guid":{"rendered":"http:\/\/10.0.1.197\/?p=4208"},"modified":"2024-08-27T08:30:56","modified_gmt":"2024-08-27T06:30:56","slug":"atsec-present-at-the-2024-pci-community-conference","status":"publish","type":"post","link":"http:\/\/192.168.0.78\/atsec-present-at-the-2024-pci-community-conference\/","title":{"rendered":"atsec\u51fa\u5e2d2024 PCI\u793e\u533a\u4f1a\u8bae"},"content":{"rendered":"\n
atsec\u5c06\u53c2\u52a02024\u5e7411\u670820\u65e5\u548c21\u65e5\u5728\u8d8a\u5357\u6cb3\u5185\u4e3e\u884c\u7684\u652f\u4ed8\u5361\u4ea7\u4e1a\u5b89\u5168\u6807\u51c6\u59d4\u5458\u4f1a\uff08PCI SSC: Payment Card Industry Security Standards Council\uff09\u4e9a\u592a\u793e\u533a\u4f1a\u8bae\uff0c\u5e76\u4e0e\u5f80\u5e74\u4e00\u6837\u8bbe\u7f6e\u5c55\u4f4d\u3002<\/p>\n\n\n\n
\u672c\u6b21\u4f1a\u8bae\u4e0a\uff0catsec\u8d44\u6df1\u987e\u95ee\u5218\u5ca9\u548c\u6c88\u56fd\u534e\u5c06\u53d1\u8868\u9898\u4e3a\u201cNew vs. New: Exploring PCI DSS v4.0 and ISO\/IEC 27001:2022\u201d\u7684\u4e3b\u9898\u8bb2\u6f14\u3002<\/p>\n\n\n\n
\u8bb2\u6f14\u7684\u6458\u8981\uff08\u82f1\u6587\u539f\u6587\uff09\u5982\u4e0b\uff1a<\/p>\n\n\n\n
In 2022, PCI DSS and ISO\/IEC 27001 released their latest versions. For many organizations that are simultaneously implementing the two standards, integrating these requirements has become a new challenge. We will provide a high-level comparison analysis for the two standards and explore how to merge the requirements into the organization\u2019s own and unified Information Security Management System (ISMS). The concepts related to Customized Approach, risk assessment, nonconformity and corrective action will be discussed. The authors will share the experience on how assessed entities have been compliant with both the new standards in recent years.<\/p>\n\n\n\n
\u8be5\u6458\u8981\u7684\u4e2d\u6587\u7ffb\u8bd1\u5982\u4e0b\uff1a 2022\u5e74\uff0cPCI DSS\u548cISO\/IEC 27001\u53d1\u5e03\u4e86\u6700\u65b0\u7248\u672c\u3002\u5bf9\u4e8e\u8bb8\u591a\u540c\u65f6\u5b9e\u65bd\u8fd9\u4e24\u4e2a\u6807\u51c6\u7684\u673a\u6784\u6765\u8bf4\uff0c\u6574\u5408\u8fd9\u4e9b\u8981\u6c42\u5df2\u6210\u4e3a\u65b0\u7684\u6311\u6218\u3002\u6211\u4eec\u5c06\u5bf9\u8fd9\u4e24\u4e2a\u6807\u51c6\u8fdb\u884c\u6bd4\u8f83\u5206\u6790\uff0c\u5e76\u63a2\u8ba8\u5982\u4f55\u5c06\u8981\u6c42\u5408\u5e76\u5230\u673a\u6784\u81ea\u8eab\u7edf\u4e00\u7684\u4fe1\u606f\u5b89\u5168\u7ba1\u7406\u7cfb\u7edf\uff08ISMS\uff09\u4e2d\u3002\u6211\u4eec\u5c06\u8ba8\u8bba\u4e0e\u5b9a\u5236\u5316\u65b9\u6cd5\u3001\u98ce\u9669\u8bc4\u4f30\u3001\u4e0d\u5408\u683c\u548c\u7ea0\u6b63\u63aa\u65bd\u76f8\u5173\u7684\u6982\u5ff5\u3002\u4f5c\u8005\u5c06\u5206\u4eab\u8fd1\u5e74\u6765\u88ab\u8bc4\u4f30\u5b9e\u4f53\u5982\u4f55\u5408\u89c4\u8fd9\u4e24\u4e2a\u65b0\u6807\u51c6\u7684\u6700\u4f73\u5b9e\u8df5\u3002<\/p>\n\n\n\n PCI SSC\u53d1\u5e03\u7684\u5ba3\u4f20\u89c6\u9891\u53ef\u901a\u8fc7\u4ee5\u4e0b\u94fe\u63a5\u8bbf\u95ee\uff1aYoutu<\/a>\uff0catsec\u5b98\u7f51<\/a> <\/p>\n\n\n\n<\/figure>\n\n\n\n