PCI DSS Implementation Training Course, ISO 17024. Payment Card Industry Data Security Standard, United Kingdom, onlive virtuel or on-site

• Train with the experts and gain the skills to lead and manage a PCI DSS (Payment Card Industry Data Security Standard) implementation project.

• Industry-leading course developed by our team of PCI QSAs (Qualified Security Assessors).

• Learn from anywhere with our Live Online option that allows you to study your way, keeping travel and costs to a minimum. 

• Successful completion of this three-day course and included exam awards the PCI DSS Implementation (PCI IM) qualification and 21 CPD/CPE points.
  

Training course outline

The PCI DSS Implementation Training Course delivers the knowledge and skills needed to implement the technical and business controls required to meet the 12 requirements of PCI DSS v3.2.1.

By taking this course, you will:

• Get an understanding of the principles and application of PCI DSS scoping.
• Gain in-depth knowledge of the 12 PCI DSS requirements.
• Acquire the skills to apply the requirements to your organisation.
• Find out how to create a PCI DSS implementation readiness programme for SAQ or external audit.
• Receive practical advice from an experienced PCI DSS consultant.

What does this course cover?

• Applying PCI DSS scoping to a given environment.

• Identifying the relationship of each of the 12 PCI DSS requirements to an organisation.

• How to implement and maintain a firewall.

• Checking for vendor-supplied defaults for system passwords.

• Methods of storing cardholder data and assurance to confirm locations.

• Encryption of transmission of cardholder data across open, public networks.

• Selecting antivirus solutions for traditional and organisational settings.

• The OWASP (Open Web Application Security Project) Top 10 and identification of updates to the risk register.

• Restricting access to cardholder data by users with different job roles.

    Identifying user accounts where multifactor authentication is required.

    Constructing a merchant premises that restricts physical access and includes locks, RFID, CCTV, PED storage and PED checks.

    Analysing and reviewing logs in the Microsoft event viewer to identify access to network resources.

    Determining appropriate testing methods including penetration testing, vulnerability scanning, ASV scanning and segmentation testing.

    How to maintain an information security policy for all users.

•   PCI DSS implementation readiness preparation.

  

  What’s included in this course?

• Full course materials (digital copy provided as a PDF file).
• The PCI DSS Implementation exam.
• A certificate of attendance.

What equipment do I need?

You will need a laptop and webcam for the duration of your course and exam.

Course duration and times

Day 1: 9:30 am – 5:00 pm
Day 2: 9:30 am – 5:00 pm
Day 3: 9:30 am – 5:00 pm

Are there any prerequisites for this course?

There are no formal entry requirements for this course. We will, however, assume that participants have a foundational knowledge of PCI DSS v3.2.1 along with the technical vocabulary to understand systems, technology and processes described by the Standard. We strongly recommend taking the PCI DSS Foundation Training Course before starting this course.

Is there any recommended reading?

We recommend that all participants read the PCI DSS, available to download for free from the PCI Security Standards Council website.

PCI DSS Implementation exam

Candidates take the PCI DSS Implementation (PCI IM) exam set by IBITGQ (International Board for IT Governance Qualifications). There is no extra charge for this exam.

• Delivery method: Online