1863 - PCI-DSS 4.x 在身份安全合规性方面的重要性.pdf

1、Orlando,FLOctober 69IBM TechXchange 2025Explore.Build.Launch.Cynthia OverbyDirector,Strategic Security SolutionsRocket SoftwareThe Significance of PCI-DSS 4.x in Identity ManagementSession#1863Agenda What is PCI Why PCI Identity Management(IDM)is so Important What Information Do Credit Card Scammers

2、 Want and Why PCI DSS Requirements Driving IDM Business Advantages of a Strong IDM program What Merchants are Doing in 2025 Implementing Strong PCI Access Control Measures Whats the Best Way to Test for Compliance IBM TechXchange|2025 IBM CorporationWhat is PCIIBM TechXchange|2025 IBM Corporation3PC

3、I stands for Payment Card Industry,and compliance with PCI industry standards is a requirement for those that accept credit cards and for software providers who have applications which involve the transmission and/or storage of credit card information.Why PCI IDM is so Important4IBM TechXchange|2025

4、 IBM CorporationCredit card scammers want your full payment card details,including the card number,expiration date,and security code(CVV),to make unauthorized purchases.They also seek your personal identification information such as your name,address,date of birth,and Social Security Number(SSN)to o

5、pen fraudulent credit card accounts in your name.Other sought-after information includes your bank account details,and in some cases,your PIN for skimming.Common Fraud Methods 5IBM TechXchange|2025 IBM CorporationReal-time payment fraud,refund/policy abuse,phishing attacks,first-party misuse and car

6、d testing are the top five threats.These attacks each impact between one-third and half of all merchants globally.98%of merchants report experiencing one or more of the following types of fraud in the past 12 months.Account takeover:A fraudster takes control of a credit or debit card account to make