PCI DSS: Infrastructure Security from Pluralsight

The first two requirements of PCI DSS version 3.2.1 are to build and maintain secure networks and systems. You'll learn to understand what each requirement asks for and discover practical guidance from experienced PCI assessors.

The key to achieving PCI DSS compliance is a thorough knowledge of each of the sub-requirements and how they will be assessed. In this course, PCI DSS: Infrastructure Security, you’ll learn how to interpret PCI DSS requirements 1 and 2, and apply them to your organization. First, you’ll learn how PCI DSS wants a firewall configuration to be built and maintained to protect cardholder data. Next, you’ll explore the requirement to not use vendor-supplied defaults for systems passwords and other security parameters. Finally, you’ll discover practical insights about both requirements from experienced PCI assessors. When you’ve finished with this course you will have the skills and knowledge to apply PCI DSS requirements 1 and 2 to any organization’s environment and to determine whether it is compliant with the demands of the standard.

What's inside

Syllabus

Course Overview

Requirement 1: Install and Maintain a Firewall Configuration

Requirement 1 Continued: Install and Maintain a Personal Firewall

Requirement 2: Do not Use Vendor-supplied Defaults

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Useful if you're looking to delve into PCI regulations for business

Core elements of PCI DSS regulations, requirements, and guidelines are presented

Provides practical guidance in applying PCI DSS requirements to your company's infrastructure security

Taught by security professionals with experience in PCI assessments

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in PCI DSS: Infrastructure Security with these activities:

PCI DSS Awareness Program

Show steps

Disseminate knowledge about PCI DSS requirements and best practices to business organizations, contributing to the overall security landscape.

Browse courses on Community Outreach

Show steps

Identify opportunities to volunteer
Prepare to educate and engage
Conduct awareness sessions

PCI DSS Assessment Best Practices

Show steps

Explore industry-leading best practices for conducting thorough and comprehensive PCI DSS assessments to enhance knowledge and understanding.

Show steps

Identify recommended resources
Review assessment methodologies
Practice applying best practices

Firewall Configuration Practice

Show steps

Enhance understanding and application of PCI DSS firewall configuration requirements by engaging in practice drills.

Browse courses on Firewall Configuration

Show steps

Identify different firewall settings
Practice configuring firewalls
Evaluate firewall effectiveness

Three other activities

Expand to see all activities and additional details

Show all six activities

Secure Password Management

Show steps

Solidify knowledge of secure password management practices and their importance in PCI DSS compliance through hands-on drills.

Browse courses on Password Management

Show steps

Identify different password hashing algorithms
Practice implementing strong password policies
Conduct vulnerability testing

PCI DSS Compliance Plan

Show steps

Develop a comprehensive plan for implementing PCI DSS requirements, ensuring a secure infrastructure and minimizing risk.

Browse courses on Information Security Management

Show steps

Gather necessary information
Conduct risk assessment
Develop policies and procedures
Implement technical controls
Monitor and maintain compliance

PCI DSS Security Challenge

Show steps

Engage in a simulated PCI DSS security challenge to test skills in identifying and mitigating vulnerabilities, enhancing problem-solving abilities.

Browse courses on Vulnerability Assessment

Show steps

Identify available challenges
Prepare for the challenge
Participate and complete the challenge

Career center

Learners who complete PCI DSS: Infrastructure Security will develop knowledge and skills that may be useful to these careers:

Security Analyst

Protecting cardholder data is critical for organizations that accept payments, and a Security Analyst is responsible for designing and implementing security measures to protect this data. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements ensure that an organization's environment is compliant with the demands of the standard.

See salaries and explore the career path for Security Analyst

Chief Information Security Officer (CISO)

A CISO is responsible for developing and implementing an organization's cybersecurity strategy, including the protection of cardholder data. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to building and maintaining a secure network.

See salaries and explore the career path for Chief Information Security Officer (CISO)

Information Security Engineer

An Information Security Engineer is responsible for planning, implementing, and maintaining the security of an organization's information systems. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements ensure that an organization's environment is compliant with the demands of the standard.

See salaries and explore the career path for Information Security Engineer

Penetration Tester

Penetration Testers assess the security of an organization's computer systems and networks by simulating attacks. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements ensure that an organization's environment is protected from unauthorized access.

See salaries and explore the career path for Penetration Tester

Cybersecurity Architect

Cybersecurity Architects design and implement security measures to protect an organization's computer systems and networks. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to building and maintaining a secure network.

See salaries and explore the career path for Cybersecurity Architect

Information Security Manager

An Information Security Manager is responsible for developing and implementing an organization's security policies and procedures. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's information systems.

See salaries and explore the career path for Information Security Manager

Network Engineer

Network Engineers design, implement, and maintain computer networks. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements ensure that an organization's network is secure from unauthorized access.

See salaries and explore the career path for Network Engineer

Risk Manager

Risk Managers identify, assess, and mitigate risks to an organization's information systems. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's information systems.

See salaries and explore the career path for Risk Manager

Senior Network Administrator

Senior Network Administrators are responsible for overseeing the operation and maintenance of an organization's computer networks. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's network.

See salaries and explore the career path for Senior Network Administrator

Network Security Analyst

Network Security Analysts are responsible for monitoring and protecting an organization's computer networks from unauthorized access. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's network.

See salaries and explore the career path for Network Security Analyst

Security Consultant

Security Consultants help organizations develop and implement security measures. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's information systems.

See salaries and explore the career path for Security Consultant

IT Auditor

IT Auditors assess the security of an organization's computer systems and networks. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's information systems.

See salaries and explore the career path for IT Auditor

Data Protection Officer (DPO)

Data Protection Officers are responsible for ensuring that an organization's data is collected, processed, and stored in compliance with applicable laws and regulations. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's data.

See salaries and explore the career path for Data Protection Officer (DPO)

Forensic Investigator

Forensic Investigators investigate cybercrimes and other security incidents. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's information systems.

See salaries and explore the career path for Forensic Investigator

Compliance Manager

Compliance Managers are responsible for ensuring that an organization complies with applicable laws and regulations. Understanding PCI DSS requirements 1 and 2 will be vital to success in this role, as these requirements are essential to ensuring the security of an organization's data.

See salaries and explore the career path for Compliance Manager