Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Introduction
Deciphering PCI-DSS
- Overview of PCI-DSS
- The critical importance of PCI-DSS compliance
- Primary goals of PCI-DSS
PCI-DSS Standards and Core Requirements
- Broad overview of PCI-DSS obligations
- The 12 essential PCI-DSS requirements
- Establishing and sustaining secure networks and systems
- Safeguarding cardholder data
- Managing a comprehensive vulnerability program
- Enforcing robust access control protocols
- Ongoing network monitoring and testing
- Upholding a solid information security policy
PCI-DSS Compliance and Evaluation
- The PCI-DSS compliance workflow
- Defining roles and responsibilities in compliance efforts
- Overview of assessment types (SAQ, ROC)
- Collaborating with Qualified Security Assessors (QSAs)
Scope Definition and Network Segmentation
- Identifying the cardholder data environment (CDE)
- Determining the scope of PCI-DSS applicability
- The role of network segmentation in security
Constructing and Sustaining Secure Networks
- Configuration of Firewalls and routers
- Hardening network components
- Securing wireless networks
Safeguarding Cardholder Data
- Techniques for data encryption and masking
- Protecting stored cardholder information
- Ensuring secure data transmission
Managing Vulnerabilities Effectively
- Consistent update and patch management
- Identification and mitigation of security flaws
- Deployment of anti-virus and anti-malware tools
Enforcing Strong Access Controls
- Defining access control policies and procedures
- Managing user access and authentication mechanisms
- Implementing physical security measures
Ongoing Network Monitoring and Testing
- Analysis of network traffic and logs
- Execution of vulnerability scans
- Best practices in penetration testing
Maintaining a Robust Information Security Policy
- Creation and implementation of security frameworks
- Employee security awareness initiatives
- Planning for incident response
Audit Preparation for PCI-DSS
- Compiling necessary documentation and evidence
- Performing internal compliance audits
- Rectifying non-compliance gaps
Conclusion and Path Forward
Requirements
- Familiarity with the concepts of online payments
- Foundational knowledge of networking
- Basic understanding of information security principles
- Professional experience in IT or a closely related technical role
Testimonials (1)
The trainer was helpful..
