PCI DSS: Detection, Assurance, and Management

Requirements 10, 11, & 12 of PCI DSS version 3.2.1 are to monitor & test networks, and to maintain an information security policy. Understand what each requirement asks for and discover practical guidance from experienced PCI assessors.

The key to achieving PCI DSS compliance is a thorough knowledge of each of the sub-requirements and how they'll be assessed. In this course, PCI DSS: Detection, Assurance, and Management, you’ll learn how to interpret PCI DSS requirements 10, 11, & 12, and apply them to your network. First, you’ll learn the how PCI DSS wants access to network resources and cardholder data to be tracked and monitored. Next, you’ll explore the requirement to regularly test security systems and processes. You’ll also see the final requirement in PCI DSS which is to maintain a policy that addresses information security for all personnel. Finally, you’ll discover practical insights about all three requirements from experienced PCI assessors. When you’ve finished with this course you'll have the skills and knowledge to apply PCI DSS requirements 3, 4, 5, & 6 to an organization’s environment and to determine whether they are compliant with the demands of the standard.

• Course Overview 1min
• Requirement 10: Track and Monitor Access to Resources and Data 51mins
• Requirement 11: Regularly Test Security Systems and Processes 39mins
• Requirement 11.3: Penetration Testing 37mins
• Requirement 12: Maintain a Policy that Addresses Information Security 39mins
• Requirement 12 Continued: Third-party Service Providers 25mins
• Requirement 12 Continued: Incident Management 20mins