PCI DSS: Restricting Access to Cardholder Data from Pluralsight

The key to achieving PCI DSS compliance is a thorough knowledge of each of the sub-requirements and how they will be assessed. In this course, PCI DSS: Restricting Access to Cardholder Data, you’ll learn how to interpret PCI DSS requirements 7, 8 & 9, and apply them to your organization. First, you’ll learn how PCI DSS wants role-based access and based on least privilege and need to know. Next, you’ll explore the long and prescriptive requirements about username, passwords and multi-factor authentication. Then you’ll take a look at the requirements related to the protection of cardholder data in physical format – written in paper and saved to electronic media. Finally, you’ll discover practical insights about both requirements from experienced PCI assessors. When you’ve finished with this course you will have the skills and knowledge to apply PCI DSS requirements 7, 8 and 9 to any organization’s environment and to determine whether it is compliant with the demands of the standard.

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Strong fit for students and professionals working with PCI DSS and need to demonstrate technical security and compliance

Taught by experienced PCI assessors, providing practical insights

Covers the fundamentals of PCI DSS requirements 7, 8 & 9, including role-based access control, authentication, and data protection

Multi-modal course format offers a mix of videos, discussions, and interactive materials

Builds a foundation for beginners and enhances the knowledge of experienced professionals

Career center

Learners who complete PCI DSS: Restricting Access to Cardholder Data will develop knowledge and skills that may be useful to these careers:

Security Auditor

A Security Auditor is responsible for evaluating the security of an organization's computer systems and networks. This course can help Security Auditors by providing them with the knowledge and skills needed to assess an organization's compliance with PCI DSS requirements.

See salaries and explore the career path for Security Auditor

Security Consultant

A Security Consultant is responsible for providing advice and guidance to organizations on how to improve their security posture. This course can help Security Consultants by providing them with the knowledge and skills needed to help organizations comply with PCI DSS requirements.

See salaries and explore the career path for Security Consultant

Information Security Manager

An Information Security Manager is responsible for overseeing the security of an organization's computer systems and networks. This course can help Information Security Managers by providing them with the knowledge and skills needed to develop and implement security policies and procedures that comply with PCI DSS requirements.

See salaries and explore the career path for Information Security Manager

Chief Information Security Officer (CISO)

A Chief Information Security Officer (CISO) is responsible for the overall security of an organization's computer systems and networks. This course can help CISOs by providing them with the knowledge and skills needed to develop and implement a comprehensive security program that complies with PCI DSS requirements.

See salaries and explore the career path for Chief Information Security Officer (CISO)

IT Auditor

An IT Auditor is responsible for auditing an organization's computer systems and networks. This course can help IT Auditors by providing them with the knowledge and skills needed to assess an organization's compliance with PCI DSS requirements.

See salaries and explore the career path for IT Auditor

Information Security Analyst

An Information Security Analyst is responsible for protecting an organization's computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. This course can help Information Security Analysts by providing them with the knowledge and skills needed to implement and manage security controls that restrict access to cardholder data in accordance with PCI DSS requirements.

See salaries and explore the career path for Information Security Analyst

Security Engineer

A Security Engineer is responsible for designing, implementing, and maintaining security controls for an organization's computer systems and networks. This course can help Security Engineers by providing them with the knowledge and skills needed to implement and manage security controls that restrict access to cardholder data in accordance with PCI DSS requirements.

See salaries and explore the career path for Security Engineer

Compliance Manager

A Compliance Manager is responsible for ensuring that an organization complies with all applicable laws and regulations. This course can help Compliance Managers by providing them with the knowledge and skills needed to develop and implement compliance programs that comply with PCI DSS requirements.

See salaries and explore the career path for Compliance Manager

Forensic Accountant

A Forensic Accountant is responsible for investigating financial crimes. This course may be useful for Forensic Accountants by providing them with the knowledge and skills needed to investigate financial crimes involving cardholder data.

See salaries and explore the career path for Forensic Accountant

Data Protection Officer (DPO)

A Data Protection Officer (DPO) is responsible for overseeing the protection of personal data in accordance with applicable privacy laws and regulations. This course can help DPOs by providing them with the knowledge and skills needed to develop and implement data protection policies and procedures that comply with PCI DSS requirements.

See salaries and explore the career path for Data Protection Officer (DPO)

Privacy Officer

A Privacy Officer is responsible for ensuring that an organization complies with privacy laws and regulations. This course can help Privacy Officers by providing them with the knowledge and skills needed to develop and implement privacy policies and procedures that comply with PCI DSS requirements.

See salaries and explore the career path for Privacy Officer

Risk Manager

A Risk Manager is responsible for identifying and assessing risks to an organization's computer systems and networks. This course can help Risk Managers by providing them with the knowledge and skills needed to assess the risks associated with PCI DSS non-compliance.

See salaries and explore the career path for Risk Manager

Information Governance Manager

An Information Governance Manager is responsible for overseeing the management of an organization's information assets. This course can help Information Governance Managers by providing them with the knowledge and skills needed to develop and implement information governance policies and procedures that comply with PCI DSS requirements.

See salaries and explore the career path for Information Governance Manager

Chief Risk Officer (CRO)

A Chief Risk Officer (CRO) is responsible for the overall risk management of an organization. This course can help CROs by providing them with the knowledge and skills needed to develop and implement enterprise risk management programs that comply with PCI DSS requirements.

See salaries and explore the career path for Chief Risk Officer (CRO)

Senior Auditor

A Senior Auditor is responsible for leading and managing audit engagements. This course can help Senior Auditors by providing them with the knowledge and skills needed to assess an organization's compliance with PCI DSS requirements.

See salaries and explore the career path for Senior Auditor