Description

This course is designed for employees who receive, process, store, transfer or otherwise handle payment card information and require an understanding of the principles and responsibilities associated with protecting cardholder data. The course introduces the Payment Card Industry Data Security Standard (PCI-DSS) and explains key terminology associated with payment card security, including Cardholder Data (CHD), Sensitive Account Data (SAD), Primary Account Numbers (PAN) and Card Verification Codes (CVC). Learners consider the core PCI-DSS principles and the importance of protecting payment information from unauthorised access, misuse and fraud. Learners explore safe practices for receiving, storing, transferring and destroying cardholder data, including the appropriate use of payment terminals, online payment facilities and telephone payments. The course also considers access controls, secure storage, data retention, disposal and the actions that should be taken where payment card information is received through an inappropriate or insecure method. The course also examines payment card data security incidents, including the importance of promptly reporting suspected compromises, preserving evidence and following organisational information security procedures. Overall, the course aims to provide learners with the knowledge required to handle payment card information securely, support PCI-DSS compliance and help reduce the risk of payment card fraud and data security breaches.

Topics