Securing Payment Card Data

Course Overview

The Payment Card Industry - Data Security Standards (PCI-DSS) set guidelines that businesses must comply with in order to accept payments from debit and credit cards and otherwise store, process and / or transmit cardholder data (CHD).

This course has been designed to increase the learner’s awareness and understanding of the PCI-DSS and the organisation’s internal processes for meeting the PCI-DSS. In particular, it will focus on how CHD should be received, transferred, stored and destroyed and what employees should do if the security of CHD is compromised.

Key Content

• The purpose of the PCI-DSS;
• The key requirements of the PCI-DSS;
• Key terminology used in the PCI-DSS;
• Consequences of breaching the PCI-DSS;
• The Information Security Policy and Payment Card Data Security Procedures;
• Receiving CHD;
• Transferring and transporting CHD;
• Storing CHD;
• Destroying CHD;
• Responding to compromises of CHD security.

Learning Outcomes

At the completion of this course, learners should be able to:

• Identify the purpose of the PCI-DSS;
• Define the key terms associated with the PCI-DSS;
• Discuss the key obligations of the PCI-DSS;
• Identify and discuss their responsibilities under the Payment Card Data Security Procedures;
• Acknowledge the consequences of not complying with the PCI-DSS and the Payment Card Data Security Procedures.