PCI DSS Bootcamp: The A-Z™ Information Security Course

Ensure data availability by defining the medium, timing, data type, and recipients, while applying confidentiality, integrity, authentication, and access control for secure online data delivery.

Explore how access control protects resources through authentication and authorization, covering mandatory, discretionary, role-based, and attribute-based models with real-world examples.

Learn what constitutes a threat in information security, including accidental, man-made, natural, cyber terrorism, and technical failures, and how threats can harm assets, processes, or reputation.

Explore impact in information security, defining how threats and vulnerabilities affect organizational assets, processes, business outcomes, and stakeholders. Learn how positive or negative outcomes arise and why risk management matters.

Explains the four PCI DSS versions and introduces requirement 1, detailing five sub-requirements for documenting and maintaining network security controls around the cardholder data environment.

Define and document roles and responsibilities in the organization to enable proper awareness, governance, and segregation of duties under PCI DSS sub-requirement 1.1.2.

Explore pci-dss requirement 2 by avoiding vendor supplied default passwords and removing unused accounts. Develop configuration standards, encrypt administrative access, maintain asset inventories, and document security policies.

Explore PCI DSS requirements for protecting cardholder data, focusing on protecting stored cardholder data under requirement three and understanding encryption and cryptography under requirement four.

Implement PCI DSS requirement 3 to protect stored cardholder data by limiting storage, discarding sensitive authentication data after authorization, masking and rendering pan unreadable, and enforcing secure key management procedures.

Learn how to protect cardholder data during transmission by applying strong cryptography and secure network practices, covering encryption, confidentiality, integrity, and compliant documentation for PCI DSS requirement 4.

Develop and maintain secure systems by identifying vulnerabilities, conducting pen tests, and integrating secure coding, sdlc practices, and change control with cross-vendor antivirus protection and documented policies.

Learn to implement strong access control for cardholder data, focusing on restricting access to authorized personnel, identification and authentication, and physical access controls per PCI DSS requirements.

Learn how access control protects resources through authentication and authorization, with mac, dac, rbac, and abac approaches, using real-world identity and access management scenarios and role distinctions.

Restrict access to cardholder data and system components to only those who need to know, by implementing a strong access control mechanism and documenting and communicating policies organization-wide.