PCI DSS Implementation
Course
In London-City
Description
-
Type
Course
-
Location
London-city
The Payment Card Industry Data Security Standard (PCI DSS) is administered by the PCI Security Standards Council (PCI SCC) with the specific objectives of decreasing payment card fraud across the internet and increasing the security of confidential payment card information. Every organisation that stores or transmits or processes card holder data must comply with PCI DSS standard. Compliance to the standard is regulated and enforced by payment card brands (VISA, MasterCard, American Express) directly or through their partner relationships with ‘acquirer’ banks. Who should attend this course? Individuals who are responsible for the ensuring that their organisation becomes fully compliant to the technical and business requirements of the PCI DSS standard. Consultants seeking to provide PCI implementation advice to their respective client organisations. Learning Objectives Designed by a Qualified Security Assessor (QSA), this three day training course aims to develop the skills required to ensure that any organisation meets the requirements of the standard as defined by their payment card brand and their acquiring bank.
Facilities
Location
Start date
Start date
About this course
There are no formal entry requirements.
Reviews
Subjects
- DSS
- Compliance
Course programme
- The purpose of the PCI DSS and the requirement for protection of cardholder data.
- PCI DSS objectives and intent.
- Related PCI standards and programmes.
- Understand how PCI DSS compliance is enforced by the payment brands.
- Compliance needs for merchants and service providers. Explanation of the different levels.
- Understand how compliance must be reported by merchants and service providers.
- Overview of the 12 standard requirements.
- Scoping and applicability of the PCI DSS.
- Technical Implementation of the requirements.
- Use of IT Governance PCI DSS v3.0 Documentation Toolkit
- Project management.
- Maintaining compliance.
- Additional considerations for: call centres, encryption, software development, mobile payments, skimming.
PCI DSS Implementation