Duration
PCI-DSS Training
1 day
Outline
Introduction to PCI-DSS (9:00 AM - 9:30 AM)
Overview of PCI-DSS
Importance of PCI Compliance
Historical context and evolution of the standards
Module 1: Understanding PCI-DSS Requirements (9:30 AM - 10:30 AM)
Detailed walkthrough of the 12 PCI-DSS requirements
Discussion on the objectives of each requirement
Real-life examples of compliance and non-compliance
Coffee Break (10:30 AM - 10:45 AM)
Module 2: Building and Maintaining a Secure Network (10:45 AM - 11:45 AM)
Installing and maintaining firewall configurations
Not using vendor-supplied defaults for system passwords and other security parameters
Practical session: Reviewing firewall configurations
Module 3: Protecting Cardholder Data (11:45 AM - 12:45 PM)
Requirement 3: Protect stored cardholder data
Requirement 4: Encrypt transmission of cardholder data across open, public networks
Activity: Identifying sensitive information and discussing encryption methods
Lunch Break (12:45 PM - 1:30 PM)
Module 4: Vulnerability Management Program (1:30 PM - 2:30 PM)
Using and regularly updating anti-virus software
Developing and maintaining secure systems and applications
Group activity: Creating a basic vulnerability management plan
Module 5: Access Control Measures (2:30 PM - 3:30 PM)
Restricting access to cardholder data by business need-to-know
Assigning a unique ID to each person with computer access
Restricting physical access to cardholder data
Workshop: Role-based access control simulation
Coffee Break (3:30 PM - 3:45 PM)
Module 6: Regular Monitoring and Testing (3:45 PM - 4:30 PM)
Tracking and monitoring all access to network resources and cardholder data
Testing security systems and processes
Discussion: Implementing logging and monitoring in your environment
Module 7: Information Security Policy (4:30 PM - 5:00 PM)
Developing, maintaining, and disseminating an information security policy
Role of policy in PCI-DSS compliance
Group discussion: Challenges in policy implementation and adherence
Closing Session: Q&A and Wrap-Up (5:00 PM - 5:30 PM)
Open forum for questions and answers
Review of key takeaways from the day
Next steps and resources for further learning
Programme scope, delivery arrangements and suitability are confirmed during enquiry.