Fluent Essays

I have attached the document with 6 discussions and I need to reply to each one of them in 150 word each. APA formatPlease no copy paste and mention students name above each discussion. And reply as if you are replying to them and not as a third person vinod_srini_replies.docx Unformatted Attachment Preview Vinod DS replies 1 day ago Ramakrishna Mallela Week-11! COLLAPSE PCI Compliance: In simple words, PCI compliance is something that all merchants should comply to if they accept debit and credit cards in order to protect cardholder data. The compliance depends on your transaction volume.The security rules put down by Payment Card Industry (PCI), if you capture account numbers, CVV, card expiration dates, etc. then you are compliant to PCI so that you wont have the risk of accusation of credit card fraud, or high fines for noncompliance etc. There are several requirements set down by PCI in order to prove that you are compliant. They are, to protect cardholder data install firewall configuration and maintain it, Protect stored data, Use and regularly update anti-virus software, Restrict physical access to cardholder data, maintain a policy that addresses information security, Assign a unique ID to each person with computer access. A database administrator should keep these guidelines in mind and ensure enough security to the database that stores these sensitive data. Retailers are an easy target to cyber criminals because usually retailers are not bound to have enough security in their system to protect card related data. Also, many retailers use card-not-present transactions in their online stores, so it is impossible to keep track of the identity of the users, so anybody can login and misuse the site. Your merchant account could be revoked or you could be unable to accept certain types of cards if you are not PCI compliant. lf you are found negligent in the event of a breach, you are likely to face significant fines, higher costs through increased compliance requirements, larger merchant fees and/or potential suspension or cancellation from your credit card merchants (McDonald, Lori. “PCI Compliance: An Overview for Ecommerce). In todays world, if data is not well protected it can put your risk in a very high risk, and it is necessary to take all the best possible steps to prevent a data breach from happening and PCI compliance will be the best way to do it and protect your business. The Payment Card Industry Data Security Standard (PCI DSS, or just PCI) is a security guidelines standard identified with installment cardholder and card installment data security. Any organization or foundation that utilizations and stores such data is committed to follow the PCI standard. According to the 2018 Verizon Payment Security Report, only 52.5\% of all organizations are 100\% PCI compliant, and just 39.7\% of companies in the Americas (Petters, Jeff 30 Mar. 2020) Its recommended to keep non-production systems related to the database that stores card data (any processing or transmission systems) safe as well. For example, its not uncommon that malicious software on a non-production system provides access to the production system using internal network structure. .On the other hand, SQL Server authentication is natively alert-less in terms of attack attempts, and whats even worse, SQL Server is very responsive when validating authentication attempts - except logged failed logins, practically no other indicators exist. The PCI Standards Council is responsible for the development of the standards for PCI compliance. These standards apply for merchant processing and have also been expanded to outline requirements for encrypted internet transactions (Kagan, Julia. “PCI Compliance.” Investopedia, Investopedia, 20 Apr. 2020) ApexSQL Audit, a SQL Server auditing and compliance tool can help you accomplish these recommendations in order to comply with PCI regulations. It provides a wide range of options for auditing SQL Server activities, monitors security permissions, and login and password changes. ApexSQL Audit provides auditing of multiple SQL Server instances from a central location, with remotely accessible web based reports. To comply with PCI, you must create and maintain a safe environment, and keep your SQL Server instances, databases, and objects changes audited. To ensure that no treats for card holder and credit card data exist, use ApexSQL Audit to track security related events on SQL Server instances, databases and objects per PCI regulation requirements References: [1] Kagan, Julia. “PCI Compliance.” Investopedia, Investopedia, 20 Apr. 2020, www.investopedia.com/terms/p/pci-compliance.asp. [2] McDonald, Lori. “PCI Compliance: An Overview for ECommerce.” Brilliance Business Solutions, www.brillianceweb.com/resources/pci-compliance-an-overview-forecommerce/. [3] Petters, Jeff. “What Is PCI Compliance: Requirements and Penalties: Varonis.” Inside Out Security, 30 Mar. 2020, www.varonis.com/blog/pci-compliance/. 9 hours ago Durga Dhanusha Bikkina Discussion 11 COLLAPSE DB Security: PCI Compliance As we all know Confidentiality, Integrity and Availability are three aspects of CIA triad and each of the aspects has its own importance in securing data and providing services. Since 2000, when internet has become the medium to transfer data, exchange information, expedited communication etc., exchange of currency was also replaced by payment cards like credit and debit cards. Over 80\% of the transactions are carried out by using payment cards in US. So, this brings in the need to protect consumer personal data by the organizations that allows customers to use payment cards (Amy 2017). PCI Data Security Standard is set of security guidelines that are required to implement and protect credit card data. PCI DSS is a widely accepted set of policies and procedures intended to optimize the security of credit, debit and cash card transactions and protect cardholders against misuse of their personal information. For any credit card company to issue a card to consumer, they need to capture consumer PII data like full name, address, mother’s maiden name, social security etc. As these details are confidential, they must be secured and protected from unauthorized access or exposure to maintain confidentiality and integrity of the data. PCI DSS guidelines come with a set of requirements to be implemented by any company that allows consumers to use payment cards for transactions to be PCI compliant. Based on the revenue they make they must follow certain audit policies to ensure that they are PCI compliant. As the confidential data is stored in Databases for any retailer, all the data at rest, at motion and at processing must be encrypted. Data base roles must be created to ensure least privileges are provided to non-admin users. Any role that has admin privileges must be audited every quarter to ensure admin privileges are not misused. Database administrators must also enable audit on all the DB tables to capture audit logs in the event of data breach or cyber attack. This helps to identify who and when the attack was executed in the event of failures to provide audit evidences to internal or external auditors. Also, database administrators must always apply new patches as and when the vendor recommends or comes up with some patches to fix known issues. “Patches offered by software and operating system (OS) vendors should be regularly installed to ensure the highest possible level of vulnerability management”. Database administrators must work with Network administrators to implement firewalls accordingly. Any organization or enterprise that fails to be PCI compliant, they are bound to pay huge penalties starting from 5K to 100K based on the level of the breach and sensitivity of data that is revealed. Apart from the penalty, it is about company’s reputation and trust worthiness that is impacted adversely. This may result in consumer un-satisfaction that leads to loss of business and incurs huge loss. Complying with the security regulations for managing bank cards is extremely important for your business and the safety of your clients. For better operations, it is highly important for any company to be PCI Compliant (Ani 2017). References Amy H. W. (2017). What is PCI level 1 compliance and why do you need to know? Retrieved from https://blog.invoiced.com/what-is-pci-level-1-compliance-and-why-do-you-need-toknow Ani M. (2017). PCI Non-Compliance: 7 negative consequences for businesses. Retrieved from https://www.mymoid.com/pci-non-compliance-consequences/ Srinivas A and V replies 12 hours ago Sri Harsha Guruju Resources: Skills, technology COLLAPSE I choose “Resources: skills, technology” to discuss why Kirk states it will impact my critical thinking and shape my ambition. Employment is much higher among jobs that require an average or above-average level of preparation (including education, experience and job training); average or above-average interpersonal, management and communication skills; and higher levels of analytical skills, such as critical thinking and computer skills. Skills, we must take most of the applicable resources of the available capabilities on the team. You can have it for yourself, on the personal capabilities that you possess. Not only get what skills you have and what skills you don’t, but also which of these skills are you good at. What skills go you have available as a team and what weaknesses exist. Skills can be improved by group discussions, taking to the team members and also Working as an improved team gives you some skills which can be replaced for or in bigger vision taken. By recognizing the available talent in the group, you should choose and place wisely to optimize available resources. The availability of the resources in the reserved amount and optimal utilization (critical thinking) of skills can shape ambition. Technology is an ocean where it grows but never seems less, this keeps increasing by the years passing and also technology tools are very good resources for data visualization and to become more social factor. Technology tools are plentiful for data visualization and becoming more and more socially increasing. So, there are some packages that will do almost everything, as a complete suite. In the recent times, varying tools were used to accomplish different tasks and the improved data. There are different tasks entailed the many stages of prepping the data, developing the data, and visually presenting the data. Now technological tools accomplish almost every task. Anyways, cleaning the data is sometimes a manual task and may require writing custom code in languages such Python and R. (The R Project for Statistical Computing, 2018) Skills must be like an improved, advanced, enhanced, and adapted to ever changing technology. Skills must have the underlying principles that are developed as critical thinking when stepping though a process and knowing the correct and efficient direction. Having clear knowledge of data analysis principles allows ambition to grow, knowing you can accomplish the task. Possessing the skills (principle fundamentals and critical thinking), and technology allow you to “embrace the constraints” and “heighten your creative senses and lead to successful, innovative solutions”. (Kirk, 2016) https://www.digitalhrtech.com/technology-skills-every-hr-professional-needs/ https://www.pewresearch.org/internet/2017/05/03/the-future-of-jobs-and-jobs-training/ 16 hours ago Anusha Tadiboyina Discussion 3 Hello All, COLLAPSE Of all many key elements, the resources of the project are essential factors for profitable implementation and project completion. Skills means the skills and the need to perform specific tasks, and the ability to see how this project relates to business objectives. This is a set of features available in the team. It shows what the capabilities are and what they are not and what those capabilities are. As a team, some capabilities may be off or improved. In order to identify operational intelligence in a group and improve the resources available, one must make intelligent choices and control. The existence of ability and the use of choice is ambitious. Technology devices are becoming more and more important for information insights. That means there are some apps that will do almost everything just like the whole thing. In the past, different devices were used to perform particular tasks. Various tasks include data preparation, data development and visual presentation of data. Technical devices work almost all the time in different apps. However, from time to time it is necessary to manually clear the record as well as write custom code in languages. Visualization of data is increasing in the modern world, and technologies play an important role here, as there are many tools available for this purpose. When different tools become available, use them to learn how to use your skills and adapt to new technologies. We need to work to complete the work, practice the principles of data analysis, and try to learn and develop it so that the work can be completed. Critical thinking in the right direction will give us the opportunity to highlight our skills, and utilize the resources to work on new technologies. Skills must learn, grow and adopt ever-changing technologies. Skills need to meet basic standards that can be developed through the life of the policy and driven by the lack of knowledge of the right and green side. Having qualitative experience with statistical analysis criteria allows for increased imaging. With skills and science, you can accept boundaries and build your creativity and move toward successful, innovative solutions. Reference: Kirk, A. (2016). Data visualization: a handbook for data driven design. Sage. ... Purchase answer to see full attachment