PCI Essentials

• Overview of the Payment Card Industry (PCI)
• Introduction to the PCI SSC
• PCI SSC Website and Resources

PCI-DSS Overview 

• What is PCI-DSS?
• What are the four levels and requirements for PCI-DSS?
• Overview of the Standard
• PCI DSS Assessment Process
• PCI DSS Compliance Programs and Compliance Level
• Security Breaches Overview

PCI-DSS Requirements

• The 12 Requirements and controls of the PCI-DSS standard and in detail study.
• Compliance Validation
• Payment Applications
• The PCI PIN Transaction Security Program
• PCI‐DSS Applicability, Scoping, and Network Segmentation
• Compensating Controls
• New Standards and Emerging Technologies
• Appendix A

Advancements in Payment Security

• New Wireless Guidelines
• Tokenization
• Security Management
• System Configuration Standards
• Encryption Patch Management and Software Development Controls

Security and Compliance Management

• Maintaining Information Security Policies
• Incident Response Planning/SIEM and Log management
• Cloud Computing
• Vulnerability Scans and Penetration Testing

Reporting Fundamentals

• The Purpose of Reporting
• Who Reports to Whom
• Types of Reports

SAQ Reporting

• SAQ Overview
• Self-Assessment Process

• Compliance Managers
• Governance & Risk Managers
• Change Management Professionals
• Financial Crime & Fraud Managers
• E-Commerce Managers
• Product Development Managers
• Software professionals who are working on PCI-DA applications
• PCI-DSS Internal Auditors
• PCI-DSS Implementers
• PCI-DSS QSA
• Other auditors from various functions such as HR, Admin, facility, Business, and Finance
• IT personnel implementing and managing the card data protection and security system
• Information security staff and consultants
• Freshers

• Minimum two years of work experience in IT or a related field
• Basic knowledge and understanding of information technology
• Understanding of network security and architecture
• Familiarity with the payment industry

You will be able to:

• Understand the importance and objectives of the PCI-DSS standard
• Learn about the four levels of PCI-DSS compliance and their specific requirements
• Gain insight into the current PCI-DSS standard version and its application
• Explore the impact of security breaches and the role of PCI-DSS in the prevention
• Study the 12 PCI-DSS requirements and their detailed controls for securing cardholder data
• Understand the process and importance of compliance validation
• Learn about security management practices, system configuration standards, and encryption
• Dive into patch management, software development controls, and maintaining information security policies
• Prepare for incident response planning, SIEM, log management, cloud computing considerations, vulnerability scans, and penetration testing
• Establish a foundational knowledge of the payment card industry and the PCI Security Standards Council (PCI SSC)
• Navigate the PCI SSC website and utilize its resources effectively
• Get an overview of PCI DSS, the assessment process, compliance programs, and compliance levels
• Conduct an in-depth review of the PCI DSS requirements and understand how they are assessed
• Comprehend the purpose and types of reports necessary for demonstrating PCI compliance