PCI DSS: Securing Data, Systems, and Applications

Requirements 3 to 6 of PCI DSS version 3.2.1 are to protect cardholder data and maintain a vulnerability management program. You'll understand what each requirement asks for and discover practical guidance from experienced PCI assessors.

The key to achieving PCI DSS compliance is a thorough knowledge of each of the sub-requirements and how they will be assessed. In this course, PCI DSS: Securing Data, Systems, and Applications, you’ll learn how to interpret PCI DSS requirements 3 through 6 and apply them to your organization. First, you’ll learn how PCI DSS wants stored cardholder data to be protected. Next, you’ll explore the requirement to encrypt cardholder data in transit and the requirement to protect systems against malware. Then, you’ll take a look at the largest requirement in PCI DSS which is to develop and maintain secure systems and applications. Finally, you’ll discover practical insights about all four requirements from experienced PCI assessors. When you’ve finished with this course, you'll have the skills and knowledge to apply PCI DSS requirements 3 through 6 to an organization’s environment and to determine whether it is compliant with the demands of the standard.

• Course Overview 1min
• Requirement 3: Storage of Cardholder Data 85mins
• Requirement 4: Encryption of Transmitted Cardholder Data 19mins
• Requirement 5: Anti-virus and Anti-malware 20mins
• Requirement 6: Vulnerability Management 17mins
• Requirement 6 Continued: Change Control in the CDE 21mins
• Requirement 6 Continued: Security in Software Development 31mins