Fundamentals of PCI-DSS
https://CourseBoat.com
Genre: eLearning | MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz
Language: English | Size: 2.82 GB | Duration: 5h 21m
Learn everything about the Payment Card Industry Data Security Standards, including assessment and the 12 requirements.
What you'll learn
Terminology essential to the PCI-DSS, such as CDE, CHD, SAD, PANs, SAQs, ROCs, QSAs, as well as other payment industry terms such as issuing and acquiring banks
A brief history of the PCI-DSS and its major revisions
How the assessment process works, with ROCs and SAQs, and a clarification of the 8 types of SAQs
Everything about Requirement 1, involving having a firewall configuration to isolate your card data, network documentation and more
Everything about Requirement 2, including changing vendor defaults, isolating server functionality and securing vulnerabilities in devices
Everything about Requirement 3 in terms of securing stored data, including encryption protocols, key lifecycle, key management and more
Everything about Requirement 4, protecting data in transit, including masking plaintext PANs and using strong encryption protocols such as WPA/WPA2
Everything about Requirement 5, in terms of preventing malware through an antivirus solution that is frequently updated and frequently runs scans
Everything about Requirement 6, in terms of developing securely, doing regular vulnerability assessment and patching, as well as including developer protections
Everything about Requirement 7, in terms of limiting access to card data by "need-to-know", minimising who accesses it formally through an access control system
Everything about Requirement 8, in terms of identifying access through unique user IDs, strong authentication and MFA, password practices and more
Everything about Requirement 9, in terms of physical security, visitor identification and authorisation, as well as physical media storage/transport/destruction
Everything about Requirement 10, in terms of having a logging solution, logging specific required events, specific data points, and maintaining log integrity
Everything about Requirement 11, in terms of doing regular AP (authorised + rogue) and IP audits, vulnerability testing, pentesting, as well as having IDS/IPS
Everything about Requirement 12, in terms of having a company-wide InfoSec policy, including employee screening, third-party screening, technology uses and more
Description
SECURE YOUR DATA, SECURE YOUR KNOWLEDGE
Payment fraud has risen over time, and unfortunately is not slowing down.
The PCI-DSS, or Payment Card Industry Data Security Standards, are a set of strict standards for any organisation dealing with card data.
