PCI DSS

Introduction to data security; common terminology in the course such as aquiring bank, cardholder data (CHD), sensitive authentication data (SAD), malware and CNP transactions.

Payment card industry data security standards (PCI DSS) procedures and controls for companies; protecting businesses and customers from data theft and fraud; common vulnerabilities; why PCI DSS is important; legal requirements; consequences of incompliance.

Six main goals of PCI DSS; build and maintain a secure network and system through installation of firewall and changing of security parameters; protect cardholder data through encrypting and hashing stored information and encrypting transmition of data on public data; maintain a vulnerability management program through protecting systems against malware, regularly updating anti-virus software and developing secure systems; implement srrong access control through restricting cardholder data access to business needs, identifying access to system components and restricting physical access to data; regularly monitering networks; maintain an information security policy.

Phishing emails; unsecured wifi networks; sharing confidential information; bad passwords; malware; discussing and displaying CHD.

Creating secure and confidential passwords; online and wifi safety; F2F transactions; phone transaction; fax transactions; postal transactions; email safety; employer and employee responsibilities.