PCI PA-QSA Training Program

Training Schedule
Requirements
How to Register
Fees
General Information
Course Description
Kontakt

2011 New PA-QSA Training Course Schedule

» PA-QSA Training

Requirements

In order to attend any of the above trainings your company must already be a validated PA-QSA Company. Please see the QSA Validation Requirements - PA-QSA Supplement for more details.

All training inquiries and assignments must be submitted through your company's assigned Primary Contact.

PA-QSA training documentation requirements:

• All training inquiries and assignments must be submitted through your company's primary contact.
• PCI SSC requires all training attendees to be full time employees of a Validated PA-QSA company

How to Register

All trainings must be submitted by the QSA Company Assigned Primary Contact. To register you must email the PA- QSA Program Manager at: pa-dss@pcisecuritystandards.org.

Fees

*Please Note: plus any applicable VAT.
Please note that training fees have increased for some locations due to local area costs.

All training fees are NON-REFUNDABLE, NON-TRANSFERABLE. Confirmation and location details will be sent once payment is received. Payment Options: An invoice will be issued upon completion of registration and will include instructions to pay by Check, Credit Card or Wire Transfer.

For a list of the Regions and associated countries, please go to: Regional Countries

General Information Regarding Training

• Training times can vary, you should check the schedule above for the exact time of each class. This is the same for both training sessions; new and re-qualification. Both of these classes end with a test being administered, we strongly recommend you set your flights to allow ample time to take the test and meet your flight.
• The only materials you will need to bring are writing utensils for any notes you wish to take. No electronic devices can be used during the exam. Attendees will not be allowed to reference any training material as the exam is now a closed-book exam.
• The exact location of each training session is sent to the Primary Contact only, and is sent approximately 30 days prior to the session being held.
• PCI SSC does not negotiate or "block" room rates for any hotel location that may host a training session. All rooms are subject to the hotel rates.
• Prior to attending either PCI training session it is strongly recommended you familiarize yourself with the following publications available in the document library:
  
  • PCI Glossar
  • PCI DSS
  • PA-DSS Security Audit Procedures
  • Summary of PABP to PA-DSS Changes
  • PABP to PA-DSS Transition
  • QSA Validation Requirements - PA-QSA
  • Programmführer
  • PCI PA-DSS FAQ
• CE Hours
  • NEW PA-QSA Training prior to 2011 is granted 9 CPE Hours. New PA-QSA Training in 2011 is granted 11 CPE hours.
  • Requal PA-QSA Training is granted 5 CPE hours

Hiring or employing a PA-QSA does not assume the Company has met all of the PCI SSC validation requirements.

Course Description

The PA-QSA training program is rich in knowledge and techniques and includes:

• PCI Industry Overview – In depth coverage of the payment card industry, the terminology used to describe its key aspects, the flow of data through the various payment card mechanisms and the relationships between the various actors in the process


• PCI Thresholds and Brand Specific Requirements – Detailed coverage of the classifications and compliance requirements for merchants, service providers and vendors and the various specific requirements imposed by the various card brands


• PCI –Data Security Specification (DSS) - In-depth training an every aspect of the current DSS including requirements, reasoning and what constitutes compliance with the requirement


• PCI Code Review and Analysis – In-depth training on executing code reviews and locating non PCI compliant constructs and procedures in applications that implement payment card processing systems


• PCI Hardware and Communications Infrastructure – In-depth training on the current state of typical devices and connectivity used by organizations to accept payment cards, and communicate with the verification and payment facilities


• PCI Reporting – In depth training on constructing and filing the necessary compliance reports and techniques for communicating results to those being audited