PCI-DSS Foundation Certification Training in Chicago, IL

Overview

Graspskills is conducting instructor-led classroom and an Online PCI-DSS certification training course in Chicago, IL, United States. Enroll Now! for this PCI-DSS exam prep certification training course in Chicago, IL, United States and accelerate the scope of your career as a certified project management professional.

Our PCI-DSS live online training class in Chicago, IL, United States, is conducted by an expert instructor with real-life training and consulting experience. Our PCI-DSS certification training course content includes 5 full-length PCI-DSS examination prep mock tests with answers and explanation for each question.

Our PCI-DSS certification training course created by leading subject matter experts and delivered by experienced trainers, along with 5 full-length PCI-DSS sample tests and complimentary e-learning course included with live online training will prepare you to take the PCI-DSS certification exam with confidence.

Enroll Now! for our PCI-DSS exam prep certification training course in Chicago, IL, United States and expand the scope of your project management career. Join our PCI-DSS certification training course and obtain 35 contact hours certificate, which is mandatory for applying for the PCI-DSS examination.

For more information about our upcoming PCI-DSS exam prep certification training courses, please contact us on support@graspskills.com or fill-in the form provided on this page. Our training consultant will contact you with more information on our PCI-DSS certification training courses in Chicago, IL, United States.

We also provide PCI-DSS certification classroom training courses in Chicago, IL, United States, apart from PCI-DSS instructor-led live online training courses.

Eligibility Criteria

This Course is suitable for those who must deal with PCI compliance. It includes Audit Manager, Business Analyst, Compliance Officer, Credit Analyst, Finance Manager, IT Manager, IT Specialist, Project/Program Manager, Risk Management Analyst, Security Analyst, Senior Developer, Software Engineer, System Administrator and Web Master.

Course Outline

Part 1: PCI Fundamentals

Part 2: PCI-DSS Requirements

Part 3: Evaluation of PCI-DSS versions

Part 4: PCI-DSS Requirements and Security Assessment Procedures v3.1

Part 5: Summary of Changes from PCI-DSS v3.0 to v3.1

Part 6: PCI-DSS Quick Reference Guide

Part 7: PCI-DSS and PA-DSS Glossary of Terms, Abbreviations and Acronyms

Part 8: PCI Templates

Part 9: PCI Security Standards Council Prioritized Approach Tool

Course Objective

• Basic knowledge of the Payment Card Industry Data Security Standard (PCI DSS)
• Learn the challenges surrounding payment card security
• Understand what the PCI Standards do to mitigate these issues.
• Get tools to build a secure payments environment

FAQ

Why should I choose Graspskills for PCI-DSS Certification Training Course in Chicago, IL, United States?

Graspskills’ PCI-DSS certification training course in Chicago, IL, United States, is delivered by industry professionals. This comprehensive training course outline defined by Lean Kanban University includes hard copy and soft copy of the courseware, and 16 PDUs towards continuing certification requirement.

What is PCI-DSS?

PCI Stands for Payment Card Industry, it is the shorted acronym of PCI DSS (Data Security Standard) which is the industry standard that all merchants and service providers that take or process credit and debit cards must comply with.  There are many industry requirements that must be followed in order to protect customers credit card information.
The Payment Card Industry Data Security Standard (PCI DSS) is a set of industry standards designed to protect payment card data. Intended to create an additional level of protection for consumers and reduce the risk of data breaches involving personal cardholder data, the standards are comprised of 12 broad requirements and collectively, more than 200 line item requirements. The 12 broad requirements can be grouped into six key areas: building and maintaining a secure network; protecting cardholder data; maintaining a vulnerability management program; implementing strong access control measures; regularly monitor and testing networks; and maintaining an information security policy.
Any organization that transmits, stores or processes primary account numbers (PAN) is required to comply with the PCI DSS.  In addition, where other cardholder data is stored, processed or transmitted with PAN it must also be protected.  Cardholder data includes Primary Account Numbers (PAN), Cardholder name, Expiration Date and Service Codes.  Another type of data, known as Sensitive Authentication Data (SAD), is also covered by PCI DSS, but generally the storage of SAD is prohibited. Compliance with the DSS requirements is mandatory, regardless of the size of the merchant or the number of card transactions they process each year.  You may be required to complete PCI reporting documentation even if outsourcing your payment card processing to a third party. 

What is the role of the PCI Security Standards Council?

• The PCI Security Standards Council is an open global forum that is responsible for the development, management, education, and awareness of the PCI Data Security Standard (PCI DSS) and other standards that increase payment data security. Founded in 2006 by the major payment card brands American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa Inc., the Council has more than 600 participating organizations that represent merchants, banks, processors and vendors worldwide. It is responsible for the development, management, education, and awareness of the PCI Security Standards, including the Data Security Standard (PCI DSS), Payment Application Data Security Standard (PA-DSS), and PIN Transaction Security (PTS) requirements.
• Enforcement of compliance with the PCI standards and determination of non-compliance penalties are carried out by the individual payment card brands. 

What is a Qualified Security Assessor (QSA)?

QSA is the designation given to employees of a company/consulting firm that are authorized by the PCI Council to attest that merchants and service providers are PCI compliant.  (You are required to have gone through training and pass a test provided by the PCI Council)

What is PCI Certification?

PCI Certification –  PCI Certification is a term most used by merchants and service providers to claim they are meeting the PCI DSS requirements.  A merchant or service provider only officially states their compliance for a point in time, there is no assurance that their compliance is valid the rest of the year.

Where can I find the list of PCI DSS requirements?

For more information on the PCI DSS requirements and updates, visit the PCI Council website. This website has useful information about the PCI Security Standards Council, the complete PCI DSS requirements for merchants, vendors and security consulting companies, and the Council's certification and merchant support services. It also has regular updates on changes to the PCI requirements and upcoming PCI Council events.

Are there any benefits to PCI DSS compliance?

By properly implementing the PCI DSS and achieving and maintaining compliance, merchants can improve their overall security posture and avoid costly fines and data breaches.  They can be better prepared to prevent and detect a host of attacks against their information assets, both at the network and physical level. PCI compliance can improve operational efficiency by ensuring that policies are defined, and procedures are documented so that employees know what they should be doing and how to do it. Controls, policies and procedures developed for PCI can be rolled out across the organization to spread the security benefits and reap the greatest return on investment from a PCI compliance project. While compliance does not equal security, the PCI standards can serve as a starting point and framework for organizations that wish to create a more secure environment and better protect their customers.

What kinds of organizations may be impacted by PCI DSS compliance standards?

Any organization that transmits, processes or stores payment card data - debit and credit cards included - must comply with the PCI standards. This includes financial institutions, such as banks, insurance companies, lending agencies and brokerage firms. It also includes all kinds of merchants, from medical and dental offices to pharmacies, hospitals, schools and universities, clothing stores, government agencies, cafes, restaurants, and ecommerce companies. It even affects individuals that accept payment cards for purchases, such as those at a farmer's market, food truck or crafts fair.

It also includes service providers such as transaction processors, payment gateways, customer call centers, web hosting providers and data centers, among others.

In addition to the requirements laid out in the PCI Data Security Standard (PCI DSS), the PCI Council has created programs specifically for software developers as well as hardware and device manufacturers, including the Payment Application Data Security Standard (PA-DSS) and the PIN Transaction Security (PTS) program.

What are the PCI DSS compliance validation requirements for different merchant levels?

In addition to meeting the security requirements of PCI DSS, merchants and service providers must also validate their compliance each year, as outlined in the table below. All merchants and service providers, regardless of where they are based, must submit a passing vulnerability scan performed by an Approved Scanning Vendor (ASV) regardless of their size or the number of credit card transactions they process each year.

Level 1 merchants (greater than 6 million transactions per year) and Level 1 service providers (greater than 300,000 transactions per year) must also undergo an annual onsite audit performed by a Qualified Security Assessor (QSA) or by an employee of the company who has gone through the PCI Internal Security Assessment Training Program.

Level 2, 3 and 4 merchants and service providers must complete a PCI Self-Assessment Questionnaire (SAQ) along with an Attestation of Compliance. Once completed, validation results and documented compliance controls must be submitted to the merchant's acquiring bank. It is important to note that requirements may vary depending on the payment card. For example, Level 2 merchants that accept MasterCard must have more rigor than just the SAQ self-assessment that applies to Levels 3 - 4.  MasterCard specifies that as of June 30, 2012, Level 2 merchants that choose to complete an annual SAQ questionnaire must ensure that staff engaged in the self-assessment attend PCI SSC ISA Training, and must pass the associated accreditation program annually in-order to continue the option of self-assessment for compliance validation. Alternatively, Level 2 merchants may, at their own discretion, complete an annual onsite assessment conducted by an approved QSA rather than complete an annual self-assessment questionnaire.

It is also important to note that if a Level 2 - 4 merchant suffers a breach that results in a data compromise, they may be escalated to a Level 1 validation level. [Note: also see Visa's definition of merchant levels, which is largely determined by transaction volume. The MasterCard and American Express definitions of merchant levels are similar to Visa's.]