PCI Awareness Training

• Training Schedule
• Fees
• Attendee Information
• Course Description
• Kontakt

Note that this is not the Internal Security Assessor Program. For more information on that program, please refer to Internal Security Assessor Program.

2011 PCI Awareness Instructor Led Training Course Schedule

General Information for Attendees of the Instructor-Led Training

• The only materials you will need to bring are writing utensils for any notes you wish to take.
• The PCI SSC generally does not negotiate room rates or set up room blocks at any hotel location that may host a training session. Attendees must secure their own room reservations and rates.
• Prior to attending this session, it is strongly recommended that you familiarize yourself with the PCI Data Security Standard and Glossary.

General Information for Registrants of the Online Training

• Once the PCI SSC has received payment for your registration, you will be given access to the online training for 30 days from your first login.
• Before you begin the training it is strongly recommended that you familiarize yourself with the PCI Data Security Standard and Glossary.
• There are discounts available for companies who wish to register groups of employees for this training. Please contact the PCI SSC Training Coordinator if you wish to register 25 or more employees. The pricing structure is below.

Register Now for PCI Awareness training online!

Course Description

The online PCI Awareness training is a condensed version of our Instructor-led program. It is for those individuals who want a self-paced course or those who don’t have a need for face-to-face interaction. Both the online and instructor-led versions of the course cover the following material:

• What is PCI and what does it mean to companies that must meet compliance with the DSS ? - An overview of the payment card industry, the terminology used within the industry, the flow of transaction data through the various components that make up the payment card industry, and the relationships between the various organizations in the process.


• How the credit card brands differ in their validation and reporting requirements - Detailed coverage of the classifications and compliance requirements for merchants and service providers and details about the various card brands' compliance programs.


• Roles and Responsibilities - Descriptions of the key actors in the compliance process including high-level overviews of the Qualified Security Assessor (QSA), Internal Security Assessor (ISA), Payment Application Qualified Security Assessor (PA-QSA) and Approved Scanning Vendor (ASV) programs.


• PCI Data Security Standard (DSS) - An overview of the current DSS (version 2.0), the testing procedures for validating compliance, and what constitutes compliance with the requirements.


• PCI Hardware and Communications Infrastructure - Generalized overview of the types of devices used by organizations to accept payment cards and communicate with the verification and payment facilities.


• PCI Reporting - An overview of the different types of reports that must be submitted to the card brands or their designated agents to demonstrate compliance (or non-compliance) of the organizations filing the reports.


• Real world examples - An overview of compliance issues and mitigation strategies including defining compensating controls, creating policies and modifying the cardholder data environment.

Kontakt

If you have any questions about the PCI SSC Awareness Training, please contact the Training Coordinator at training@pcisecuritystandards.org or +1 781-876-6235.