Do you need PCI DSS training?
The PCI DSS (Payment Card Industry Data Security Standard) applies to all merchants and service providers that transmit, process, or store payment card data.
Clause 12.6 of the PCI DSS mandates that organizations implement a formal program to ensure staff attend annual security awareness training.
To assess compliance with this requirement, a PCI DSS assessor will request evidence in the form of a security awareness training policy and records that demonstrate that all staff have attended the required training.
Organizations can use several different methods to deliver the required training, including:
- In-person training sessions
- Online training modules
- Security awareness e-learning courses
The key is to ensure that all staff members receive the required training on an annual basis and that records are maintained to demonstrate compliance.
IT Governance’s PCI DSS training courses will enable you to understand the PCI DSS’s staff awareness requirements and implement a PCI DSS compliance program in your organization.
PCI DSS courses
We provide staff awareness e-learning courses, and in-house training courses for all levels, from foundation to advanced courses for IT practitioners and lead implementers seeking compliance with the Standard.
This interactive e-learning course has been designed to increase employees’ awareness of the PCI DSS requirements, and to provide clear and simple explanations of their obligations.
The course is aimed at all employees with access to cardholder information, not just those with direct responsibility for cardholder data. It is interactive, engaging, and easy to use. The facts are presented in an interesting way, using infographics, and the course can be completed in about 45 minutes.
Find out more