PCI DSS Foundation

This one day foundation course provides an introduction to the Payment Card Industry Security Standard (PCI DSS) and delivers practical guidance on how it applies to your organisation.

The PCI DSS is administered by the PCI Security Standards Council (PCI SCC) with the specific objectives of decreasing payment card fraud across the internet and increasing the security of confidential payment card information.

Every organisation that stores or transmits or processes card holder data must comply with PCI DSS standard. Compliance to the standard is regulated and enforced by payment card brands, such as VISA, MasterCard and American Express, directly or through their partner relationships with ‘acquirer’ banks.

Developed by a Qualified Security Assessor (QSA), this training course builds a clear understanding of the PCI DSS and enables learners to plan a cost-effective, time-efficient compliance project.

Who should attend this course?

Anyone involved in a PCI DSS compliance project who would like to develop a background on the standard and its requirements.

If you need a more comprehensive and practical coverage of all aspects of the implementation and continued maintenance of PCI DSS, please see our four day PCI DSS Implementation Training Course.

For a practical session on how to complete the PCI DSS v3.2 Self-Assessment Questionnaires (SAQs), please see our two day PCI DSS v3.2 SAQ Workshop.
Course contents include

  • The purpose of the PCI DSS and the requirement for protection of cardholder data.
  • PCI DSS objectives and intent.
  • Related PCI standards and programmes.
  • Understand how PCI DSS compliance is enforced by the payment brands.
  • Compliance needs for merchants and service providers. Explanation of the different levels.
  • Understand how compliance to the standard must be reported by merchants and service providers.
  • Overview of the 12 standard requirements.

Entry requirements

This introductory course has no formal entry requirements.