PCI DSS v4.0.1 Awareness Training
The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organizations that handle branded credit cards from the major card schemes. All entities which process, transmit or store cardholder data are required to comply with the latest PCI DSS, and annual awareness training for all stakeholders is mandatory.
Objectives
- Attain sufficient knowledge and understand the importance of the scheme
- Be trained in the proper handling of cardholder data
- Learn about the PCI DSS assessment process and requirements, and be prepared for the compliance process if needed
Agenda
- An Overview of PCI DSS
- Why PCI DSS Matters in Your Daily Work
- The 12 Core Requirements
- Assessment Requirements by Different Card Brands
- The PCI DSS Assessment Process
- Case Study and Things to Note
- Assessment Quiz
PCI 3DS Awareness Training
Payment Card Industry 3-Domain Secure (PCI 3DS) is a PCI Core Security Standard by PCI SSC. PCI 3DS adds an extra layer of security that lets users authenticate themselves with service providers or payment gateways during Card-Not-Present (CNP) transactions. It helps in reducing CNP payment frauds and assures security to payment service providers.
Objectives
- Understand the purpose of 3-D Secure and how it helps reduce Card-Not-Present (CNP) fraud
- Recognize the roles of the three domains (Issuer, Acquirer and Interoperability) and the flow of a 3DS transaction
- Learn about the PCI 3DS Core Security Standard requirements and assessment process, and be prepared for the compliance process if needed
Agenda
- An Overview of 3-D Secure
- Overview of a 3DS Transaction
- 3DS Transaction Overview
- PCI 3DS Core Security Standard
- Scoping 3-D Secure Assessment
- Part 1 Requirement Overview
- Part 2 Requirement Overview
- Reporting and AQM
- Assessment Quiz