Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction
Comprehending PCI-DSS
- Introduction to PCI-DSS
- The significance of PCI-DSS compliance
- Primary objectives of PCI-DSS
PCI-DSS Standards and Requirements
- Summary of PCI-DSS requirements
- The 12 core PCI-DSS requirements
- Establishing and sustaining secure networks and systems
- Safeguarding cardholder data
- Maintaining a robust vulnerability management program
- Enforcing strong access control protocols
- Regularly monitoring and testing networks
- Upholding a comprehensive information security policy
PCI-DSS Compliance and Assessment
- The PCI-DSS compliance workflow
- Roles and responsibilities within PCI-DSS compliance
- Categories of PCI-DSS assessments (SAQ, ROC)
- Collaboration with Qualified Security Assessors (QSAs)
Scoping and Segmentation
- Defining the cardholder data environment (CDE)
- Scoping the PCI-DSS applicability
- The critical role of network segmentation
Constructing and Sustaining Secure Networks
- Configurations for Firewalls and routers
- Securing network infrastructure components
- Ensuring wireless network security
Safeguarding Cardholder Data
- Techniques for data encryption and masking
- Protection strategies for stored cardholder data
- Secure methods for transmitting cardholder data
Maintaining a Vulnerability Management Program
- Regular updates and patch management strategies
- Identification and mitigation of vulnerabilities
- Implementation of anti-virus and anti-malware solutions
Enforcing Strong Access Control Measures
- Access control policies and operational procedures
- Managing user access and authentication protocols
- Physical security controls
Continuous Network Monitoring and Testing
- Monitoring network traffic and system logs
- Execution of vulnerability scans
- Best practices in penetration testing
Sustaining an Information Security Policy
- Development and implementation of security policies
- Employee security awareness training
- Incident response planning
Preparation for PCI-DSS Audits
- Compilation of necessary documentation and evidence
- Conducting internal compliance audits
- Remediation of non-compliance issues
Summary and Subsequent Steps
Requirements
- Comprehension of online payment mechanisms
- Foundational knowledge of Networking
- Core principles of Information Security
- Professional experience in an IT or IT-adjacent role
Testimonials (1)
The trainer was helpful..
