PCI DSS: Achieving and Maintaining Compliance from Pluralsight

Achieving PCI DSS compliance can be hard and frustrating. This course provides practical advice for every stage of the compliance journey from working out what compliance means for you, scoping, assessment, and importantly how to stay compliant.

It's time to bring together the theoretical knowledge of becoming PCI DSS compliant, and the practical knowledge of how the standard really works! In this course, PCI DSS: Achieving and Maintaining Compliance, you’ll gain the ability to take an organization on a PCI DSS compliance journey and understand the challenges in maintaining PCI DSS compliance. First, you’ll learn about who may ask you to comply with PCI DSS and the different ways that you can demonstrate your compliance. Next you’ll explore how to determine what people, processes and technology that the PCI DSS requirements will apply to, and the ways to minimize these. Then, you'll discover what a Qualified Security Assessor (QSA) will do when they assess your compliance with the standard, and what you can do when your organization cannot comply with certain requirements. Finally, you’ll learn how to prevent control decay, scheduled tasks, and change from destroying your hard-won PCI DSS compliance. When you’ve finished with this course you'll have the skills and knowledge to pilot an organization through a successful PCI DSS compliance journey, and then maintain PCI DSS compliance year after year.

What's inside

Syllabus

Course Overview

Introduction and Recap

What Does Compliance Mean?

The Journey to Compliance

Scoping, Segmentation, and Scope Reduction

Using and Assessing the Standard

The Assessment Process

Maintaining Compliance

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Explores PCI DSS compliance, which is a common requirement for organizations handling credit card data

Taught by John Elliott and Jacob Ansari, who are experts in PCI DSS compliance

Develops knowledge and skills necessary to guide organizations through PCI DSS compliance and maintain it long-term

Covers the PCI DSS standard in-detail and how organizations can assess their compliance

Provides practical advice on how to scope, assess, and maintain PCI DSS compliance

May require some prior knowledge of information security and compliance

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in PCI DSS: Achieving and Maintaining Compliance with these activities:

Review PCI DSS Certification Knowledge

Show steps

Revise your preexisting PCI DSS knowledge so you enter the course with a firm foundation.

Browse courses on PCI DSS

Show steps

Review official PCI DSS documentation.
Take practice tests or quizzes on PCI DSS.
Attend a PCI DSS webinar or workshop.

Follow PCI DSS Compliance Tutorials

Show steps

Enhance your understanding by following guided PCI DSS compliance tutorials.

Browse courses on PCI DSS

Show steps

Identify reputable sources for PCI DSS compliance tutorials.
Choose tutorials that align with your learning style and needs.
Follow the tutorials step-by-step and take notes.

Follow Guided Tutorials on PCI DSS Compliance

Show steps

Complete guided tutorials that provide practical guidance on how to achieve and maintain PCI DSS compliance.

Show steps

Find reputable online tutorials
Create a dedicated workspace
Break down the tutorials into manageable chunks

Three other activities

Expand to see all activities and additional details

Show all six activities

Attend a PCI DSS Compliance Workshop

Show steps

Enhance your knowledge and skills through a hands-on PCI DSS compliance workshop.

Browse courses on PCI DSS

Show steps

Identify and register for a reputable PCI DSS compliance workshop.
Attend the workshop and actively participate in the exercises and discussions.
Network with other professionals in the field.

Develop a PCI DSS Compliance Plan

Show steps

Solidify your understanding by creating a comprehensive PCI DSS compliance plan.

Browse courses on PCI DSS

Show steps

Gather information about your organization's payment card data environment.
Identify the applicable PCI DSS requirements.
Develop a plan to implement the requirements.
Obtain buy-in from stakeholders.
Implement the plan and monitor its effectiveness.

Practice PCI DSS Assessment Techniques

Show steps

Gain proficiency in assessing PCI DSS compliance through practice drills.

Browse courses on PCI DSS

Show steps

Familiarize yourself with the PCI DSS assessment methodology.
Obtain access to sample assessment scenarios.
Conduct practice assessments and document your findings.

Career center

Learners who complete PCI DSS: Achieving and Maintaining Compliance will develop knowledge and skills that may be useful to these careers:

Payment Card Industry Security Officer

A Payment Card Industry Security Officer (PCI SOS) is responsible for managing an organization's PCI DSS compliance program. This course can help you gain a comprehensive understanding of PCI DSS compliance and how to implement it within an organization. You'll learn about the different roles and responsibilities of a PCI SOS and how to develop and maintain a successful compliance program.

See salaries and explore the career path for Payment Card Industry Security Officer

Vendor Risk Manager

A Vendor Risk Manager manages the risks associated with an organization's third-party vendors. This course can help you gain a deep understanding of PCI DSS compliance and how to implement it within an organization. You'll learn about the different vendor risk management practices required by PCI DSS and how to assess a vendor's compliance with the standard.

See salaries and explore the career path for Vendor Risk Manager

Technology Audit Manager

A Technology Audit Manager oversees an organization's technology audit function. This course can help you gain a comprehensive understanding of PCI DSS compliance and how to audit an organization's compliance with the standard. You'll learn about the different audit procedures required by PCI DSS and how to report on an organization's compliance status.

See salaries and explore the career path for Technology Audit Manager

Systems Administrator

A Systems Administrator manages and maintains an organization's computer systems and networks. This course can help you understand the PCI DSS standard and how to implement it within an organization. You'll learn about the different system administration practices required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Systems Administrator

Security Engineer

A Security Engineer designs, implements, and maintains an organization's security infrastructure. This course can help you understand the PCI DSS standard and how to implement it within an organization. You'll learn about the different security controls required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Security Engineer

Security Consultant

A Security Consultant provides security advice and services to organizations. This course can help you gain a comprehensive understanding of PCI DSS compliance and how to implement it within an organization. You'll learn about the different security consulting practices required by PCI DSS and how to develop and maintain a successful consulting practice.

See salaries and explore the career path for Security Consultant

Security Analyst

A Security Analyst investigates and responds to security incidents. This course can help you gain a deep understanding of PCI DSS compliance and how to implement it within an organization. You'll learn about the different security incident response practices required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Security Analyst

Risk Analyst

A Risk Analyst identifies, assesses, and mitigates risks. This course can help you gain a deep understanding of PCI DSS compliance and how to implement it within an organization. You'll learn about the different risk assessment practices required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Risk Analyst

Project Manager

A Project Manager ensures that a project is completed on time, within budget, and according to specifications. This course can help you understand the PCI DSS standard and how to implement it within an organization. You'll learn about the different project management practices required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Project Manager

Privacy Officer

A Privacy Officer is responsible for protecting an organization's privacy and data. This course can help you gain a deep understanding of PCI DSS compliance and how to implement it within an organization. You'll learn about the different privacy regulations that apply to PCI DSS and how to assess an organization's compliance with these regulations.

See salaries and explore the career path for Privacy Officer

Network Security Engineer

A Network Security Engineer is responsible for designing, implementing, and maintaining an organization's network security infrastructure. This course can help you gain a deep understanding of PCI DSS compliance and how to implement it within an organization. You'll learn about the different network security controls required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Network Security Engineer

IT Risk Manager

An IT Risk Manager is responsible for identifying, assessing, and mitigating IT risks. This course can help you understand the PCI DSS standard and how to implement it within an organization. You'll learn about the different risk management practices required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for IT Risk Manager

IT Auditor

An IT Auditor evaluates an organization's IT systems and processes to ensure that they are operating effectively and efficiently. This course can help you gain a deep understanding of PCI DSS compliance and how to audit an organization's compliance with the standard. You'll learn about the different audit procedures required by PCI DSS and how to report on an organization's compliance status.

See salaries and explore the career path for IT Auditor

Information Security Analyst

An Information Security Analyst is responsible for protecting an organization's computer systems and data from unauthorized access, use, disclosure, disruption, modification, or destruction. This course can help you understand the PCI DSS standard and how to implement it within an organization. You'll learn about the different security controls required by PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Information Security Analyst

Compliance Auditor

A Compliance Auditor ensures that companies adhere to external regulations and standards, such as PCI DSS. This course can help you build a foundation in PCI DSS compliance, which is essential for a successful career in compliance auditing. You'll learn about the different requirements of PCI DSS and how to assess an organization's compliance with the standard.

See salaries and explore the career path for Compliance Auditor

PCI DSS

Achieving and Maintaining Compliance

What's inside

Syllabus

Good to know

Save this course

Activities

Career center

Reading list

Share

Similar courses