Duration
3 days
Overview
The Internal Security Assessor program teaches you how to perform internal assessments for your company and recommend solutions to remediate issues related to PCI DSS compliance. Assessors are sponsored by their companies, so when you receive this qualification you will be able to act as a liaison with external PCI auditors and manage interactions with a Qualified Security Assessor (QSA).
Benefits of the course include:
- Understand the PCI DSS and how it can help protect your customer data and your business
- Define the processes involved in card processing and network segmentation
- Help your organization build internal expertise and assess its compliance with PCI Standards
- Enhance payment card data security and manage compliance costs
Part 1 - PCI Fundamentals
PCI Fundamentals assures that all candidates attending the ISA training course have the same baseline understanding. The PCI Fundamentals course must be completed within thirty days of initial access and a minimum of one week prior to the start of an on-site training class. This prerequisite course covers:
- Understanding the Payment Card Industry Security Standards Council and its role
- Defining the processes involved in card processing
- PCI roles and responsibilities
- Understanding cardholder data
- Defining network segmentation
- PCI DSS assessments
Part 2 - ISA Qualification
Candidates who successfully complete the prerequisite PCI Fundamentals course may move on to the ISA qualification course. This course builds on the knowledge gained in PCI Fundamentals and delves into the actual PCI DSS requirements, testing procedures, compliance reports and more. The Internal Security Assessor course covers:
- What is PCI and what does it mean to companies that must meet compliance with the DSS?
- Industry overview
- Terminology
- Transaction data flow
- Relationships between various organizations in the process
- How the credit card brands differ in their validation and reporting requirements
- PCI Data Security Standard (DSS)
- Overview of each requirement
- Testing procedures
- What constitutes compliance
- PCI Hardware and Communications Infrastructure
- PCI Reporting
- Overview of compliance issues and mitigation strategies
- Compensating controls
- Creating policies
- Modifying cardholder data environment
The instructor-led course includes case studies providing a simulation of assessment scenarios that may help you in solving common problems within your own payment environment.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.