What you'll learn:
- An understanding of the PCI-DSS standard
- Understanding of the PCI-DSS Compliance
- PCI DSS Terminologies
- PCI DSS Reports for AWS and Azure Cloud
- Scope of PCI DSS
- Applicability of PCI DSS
- 6 Goals and 12 Requirements
- Verification of PCI Compliance
- Continous Monitoring by Staying Vigilant
This online course on PCI DSS Standard and Compliance is designed to provide a comprehensive understanding of the Payment Card Industry Data Security Standard (PCI DSS) and how to comply with its requirements. The course covers the 12 requirements of the PCI DSS standard, which are designed to protect sensitive payment card data and help organizations prevent data breaches.
The course starts by introducing the basics of PCI DSS, including its scope and purpose, as well as the different levels of compliance that organizations can achieve. You will learn about the 12 requirements of the standard, which cover areas such as secure network architecture, access controls, and incident response.
Throughout the course, you will learn about the best practices and technologies that can be used to help organizations comply with the PCI DSS standard, including firewalls, intrusion detection systems, and encryption.
You will also learn about the various tools and resources that are available to help organizations assess their compliance with the standard, including PCI DSS self-assessment questionnaires (SAQs) and on-site assessments.
The course also covers the various reports that organizations are required to submit to demonstrate their compliance with the standard, including the Attestation of Compliance (AOC) and the Report on Compliance (ROC).
The course is suitable for professionals working in the field of information security, IT, or related fields, as well as anyone interested in learning more about how to protect sensitive payment card data and comply with the PCI DSS standard. By the end of the course, you will have a comprehensive understanding of the PCI DSS standard and how to implement the necessary controls to comply with it.
For easy understanding complete course is divided in 10 Sections and topics covered in respective sections are defined as follows:
In Section 1 following topics are covered
Background - PCI DSS Standard
History - PCI DSS Standard
What do mean by PCI DSS
Why you should get PCI Compliant
Confusion around PCI DSS
In Section 2 following topics are covered wherein most common terminologies used in PCIDSSare covered.
What do Merchants, Provider or Issuers Mean ?
What is a Qualified Security Assessor (QSA)?
Who is ISA (Internal Security Assessor) ?
What is (SAQ) Self-Assessment Questionnaire ?
What is (AOC ) Attestation of Compliance ?
What is (RoC) Report on Compliance ?
In Section 3 following topics are covered wherein concepts like PCI DSS Scope and Its Requirements are covered in detail
How Card transaction work (Explained in 8 Steps)
PCI DSS Applicability
Systems In Scope of PCI DSS
6 Goals and 12 requirements
Imp- Structure of PCI DSS Standard
In Section 4 is about Goal 1 (Build and Maintain a Secure Network) wherein underlying Requirements are covered in detail
Req 1: Install and maintain a firewall configuration to protect cardholder data
Req 2: Don’t use vendor-supplied defaults for system passwords
In Section 5 is about Goal 2 (Protect Card Holder data) wherein underlying Requirements are covered in detail
Req 3: Protect stored cardholder data
Req 4 : Encrypt transmission of cardholder data across open, public networks
In Section 6 is about Goal 3 (Maintain a Vulnerability Management Program) wherein underlying Requirements are covered in detail
Req-5: Use and regularly update antivirus software or programs
Req-6 : Develop and maintain secure systems and applications
In Section 7 is about Goal 4 (Implement Strong Access Control Measures) wherein underlying Requirements are covered in detail
Req-7 : Restrict access to cardholder data by business need to know
Req-8 : Assign a unique ID to each person with computer access
Req-9 : Restrict physical access to cardholder data
In Section 8 is about Goal 5 (Goal-5 : Regularly Monitor and Test Networks) wherein underlying Requirements are covered in detail
Req-10 : Track and monitor all access to network resources and cardholder data
Req-11 : Regularly test security systems and processes
In Section 9 is about Goal 6 (Goal-6 : Maintain an Information Security Policy) wherein underlying Requirements are covered in detail
Req-12 : Maintain a policy that addresses information security for all personnel
In Section 10 we have covered following topics which helps you to understand as how Verification of PCI Compliance can be done
Levels of PCI Compliance/Merchant Levels
Scanning by ASV (APPROVED SCANNING VENDOR)
Verifying Compliance with PCI
Validating a Requirement is in Place
Meeting the reporting requirement of PCI DSS
