PCI DSS Assessor

Ensuring PCI DSS compliance

Requirements:
  • Nevyžaduje praxi

To all managers who participate in the creation of documentation or the implementation of processes with the aim of ensuring compliance with PCI DSS in the same vein: Gap analysis, Assessment, Compliance, Audit, Certification) and others..

The management course is also suitable for those who need to acquire more comprehensive and practical knowledge of all PCI DSS requirements.

You will spend most of it on positions

IT, Project

Operation, Development

and others involved in PCI DSS compliance

What will you learn

More information
  • Understand the practical implications of PCI DSS
  • Show a roadmap for the implementation of all 12 requirements
  • Get answers to questions first hand: Qualified Security Assessor (QSA)
  • Best practices and techniques needed for data protection and security

Terms

Currency
Term
Place
Length
Language
Price without VAT

No results match the specified filters

Loading...

Do you want this course individually?

Let us know!

This course can be customized - either as an individual training 1:1 or for your team. Just leave us your contact and we will contact you with options tailored to your needs.

Successfully sent

We will contact you.

Timeline

Day 1

09:00 – 10:30 Introduction to PCI DSS
  • Terminology
  • Card Data Security Basics
  • Card Transaction Processing
  • Relationship Between PCI DSS and PA - DSS
10:30 – 10:45 Coffee break
10:45 – 12:15 PCI DSS Requirements
  • Protecting Cardholder Data
  • Regular Network Monitoring and Testing
  • Maintaining an Information Security Policy
  • Maintaining a Vulnerability Control Program
  • Building and Maintaining a Secure Network and Systems
12:15 – 13:15 Lunch break
13:15 – 14:45 PCI DSS Implementation 1/4
  • Scoping the Cardholder Data Environment
  • Segmentation
  • Model Examples
14:45 – 15:00 Coffee break
15:00 – 16:30 PCI DSS Implementation 2/4
  • Gap Analysis
  • PCI DSS Risk Management
  • PCI DSS Risk Identification and Analysis

Day 2

09:00 – 10:30 PCI DSS Implementation 3/4
  • Proposal for Measures
  • Quick Win Implementation Order
  • Compensation Measures - Principles
10:30 – 10:45 Coffee break
10:45 – 12:15 PCI DSS Implementation 4/4
  • Best Practice
  • PCI DSS in Everyday Operation
  • Recommended Implementation Practices
  • Model Examples of Successful Implementation
12:15 – 13:15 Lunch break
13:15 – 14:45 PCI DSS Compliance Management System
  • Compliance Management System
  • Demonstrating PCI DSS Compliance
Certification Requirements
  • Audit
  • Certification
  • Assessment
  • Penetration Testing
14:45 – 15:00 Coffee break
15:00 – 16:30 Certification Exam
  • Conclusion, Summary
  • PCI DSS Auditor Exam
  • Block length 90 min.
  • Teaching hours 16
  • Refreshments Yes
  • Exam Yes

Graduates of the course will understand the principles of the PCI DSS system from the perspective of data protection within payment systems.

Thanks to the course, you will be able to help your organization create internal procedures, processes and implement measures leading to PCI DSS Compliance.

You will be able to prepare for SAQ or QSA. No prior knowledge and experience in the field of PCI DSS is necessary.

Prestigious certification included

PCI DSS Assessor

Graduates of the course will receive a PCI DSS Assessor Certificate.

As part of the certification process, they must demonstrate knowledge and understanding of the Payment Card Industry Data Security Standard (PCI DSS) and its practical application. The exam tests the ability to assess environments in which payment cardholder data is processed, stored, or transmitted, and to provide recommendations for achieving and maintaining compliance with PCI DSS requirements.

The exam topics are:

  • PCI DSS principles and requirements

  • Security objectives and requirements (12 main areas of PCI DSS)

  • Roles of entities in the payment ecosystem (merchant, acquirer, issuer, service provider)

  • Types of SAQs (Self-Assessment Questionnaires) and their use

  • Roles and responsibilities of PCI DSS assessors (QSA, ISA, ASV, QIR)

  • Compliance assessment process and evidence of compliance

  • Network segmentation, access control, monitoring, and testing

  • Risks of non-compliance and possible consequences of violations (fines, reputational impact)

Certification instructions

Exam format

Exam format

  • Duration: 90 minutes

  • Number of questions: 40

  • Minimum pass mark: 60%

  • Language: English

  • Type of questions: multiple choice (1 correct answer)

  • Additional conditions: closed book – no materials may be used

Frequently asked questions

All questions

What is PCI DSS?

The Payment Card Industry Data Security Standard (PCI DSS) is a security standard developed by the Payment Card Industry Security Standards Council to protect sensitive payment card information during transactions and storage.

PCI DSS sets out payment card protection requirements that merchants, banks, payment gateways and anyone else who processes, stores or transmits payment card data must comply with. These requirements include, for example, the implementation of security measures such as data encryption, regular monitoring of the network and systems, restriction of access to sensitive information, regular testing of security systems and others.

Your next career step