PCI-DSS ver. 3.2.1 Implementation Classroom Training

Level Implementation Duration 2 days

Available to book: Public classroom View dates and book now

Average Satisfaction Score This 2 day PCI DSS v3.2.1 Implementation Training is primarily aimed at enabling you to understand and implement PCI DSS 3.2.1 Standard successfully in your organization. You will gain a clear conception of the various requirements of the Payment Card Industry Standards, and discover the intent behind each of its requirements.

This Workshop is primarily aimed at enabling delegates to understand and implement PCI DSS Standard successfully in their organization. Delegates will gain a clear understanding of the various requirements of the Payment Card Industry Standards, and discover the intent behind each of its requirements.

The standard basically requires to:

Build and maintain a secure IT network
Protect cardholder data
Maintain a vulnerability management program
Implement strong access control measures
Regularly monitor and test networks
Maintain an information security policy

Upon completion of this training, delegates will be able to:
- Gain an understanding of the Payment Card Industry.
- An understanding of PCI DSS to ensure better protection of cardholder data.
- Conduct a base line review of the organizations current position with regard to PCI DSS ver. 3.2.1
- Interpret the requirements of PCI DSS ver. 3.2.1 from an implementation perspective in the context of their organization
- Implement PCI DSS ver. 3.2.1 in the organisation
Prerequisites

Candidates should have and basic understanding and experience in Information Security standards such as ISO 27001.
- Those who will be involved in advising top management on the introduction of PCI DSS ver.3.2.1 into an organization
- Designed for those with implementing PCI DSS 3.2.1 responsibility
- Those planning to implement a system or new to managing a system
- Anyone working within information security, including consultants.
Course Agenda

Day – 1
- What is PCIDSS 3.2.1 and its purpose
- Payment Transaction Flow
- Merchant levels and Service provider levels
- SAQ types and reporting requirements
- Card holder data discovery
- Scoping the Cardholder Data Environment
- Segmentation
- Req.1 – Install and maintain a firewall configuration
- Req.2 – Do not use vendor – supplied defaults for system passwords
- Req. 3 – Protect stored card holder data
- Req. 4 – Encrypt transmission of card holder data across open and public networks
Day – 2
- Quiz
- Req. 5 - Protect all systems against malware and regularly update anti-virus
- Req. 6 - Develop and maintain secure systems and applications
- Req. 7 - Restrict access to cardholder data by business need to know
- Req. 8 - Identify and authenticate access to system components
- Req. 9 - Restrict physical access to cardholder data
- Req. 10 - Track and Monitor all access to network resources and cardholder data
- Req. 11 - Regularly test security systems and processes
- Req. 12 - Maintain a policy that addresses information security for all personnel
- Q and A Session
- Appendix A
- Exam
- Refreshments/ Lunch
- Course Folder
- Pen and Notepad
- Certificate of attendance
- Loan copy of the standard (to be returned after the course)
If you have any enquiries, let us know how can we help you.
Call: +91 80815 80815
Email us: info.in@bsigroup.com

Let's shape your organization's future together

Reach out and see how we can help guide you on your path to sustainable operational success.

Get in touch