Course Outline
Introduction
Understanding PCI-DSS for Government
- Introduction to PCI-DSS for government entities
- Importance of PCI-DSS compliance in the public sector
- Key objectives of PCI-DSS for government operations
PCI-DSS Standards and Requirements
- Overview of PCI-DSS requirements for government agencies
- The 12 PCI-DSS requirements
- Build and maintain a secure network and systems for government use
- Protect cardholder data in government environments
- Maintain a vulnerability management program for government systems
- Implement strong access control measures for government operations
- Regularly monitor and test networks for government security
- Maintain an information security policy for government agencies
PCI-DSS Compliance and Assessment
- PCI-DSS compliance process for government entities
- Roles and responsibilities in PCI-DSS compliance for government organizations
- Types of PCI-DSS assessments (SAQ, ROC) for government agencies
- Working with Qualified Security Assessors (QSAs) for government needs
Scoping and Segmentation
- Defining the cardholder data environment (CDE) for government systems
- Scoping PCI-DSS for government operations
- Network segmentation and its importance in government networks
Building and Maintaining a Secure Network for Government
- Firewalls and router configurations for government networks
- Securing network components for government use
- Wireless networking security for government agencies
Protecting Cardholder Data in Government Environments
- Data encryption and masking techniques for government systems
- Protecting stored cardholder data in government operations
- Secure transmission of cardholder data for government entities
Maintaining a Vulnerability Management Program for Government
- Regular updates and patch management for government systems
- Identifying and mitigating vulnerabilities in government networks
- Anti-virus and anti-malware solutions for government use
Implementing Strong Access Control Measures for Government
- Access control policies and procedures for government operations
- Managing user access and authentication in government systems
- Physical security controls for government facilities
Regularly Monitoring and Testing Networks for Government Security
- Monitoring network traffic and logs for government networks
- Conducting vulnerability scans for government systems
- Penetration testing best practices for government agencies
Maintaining an Information Security Policy for Government Agencies
- Developing and implementing security policies for government entities
- Security awareness training for government employees
- Incident response planning for government operations
Preparing for a PCI-DSS Audit in Government
- Preparing documentation and evidence for government audits
- Conducting internal audits for government compliance
- Addressing non-compliance issues in government agencies
Summary and Next Steps for Government Entities
Requirements
- Comprehend the principles of online payment systems for government
- Fundamentals of network infrastructure
- Basic concepts of information security
- Professional experience in an IT or IT-related position
Testimonials (5)
The fact that there were practical examples with the content
Smita Hanuman - Standard Bank of SA Ltd
Course - Basel III – Certified Basel Professional
Speed of response and communication
Bader Bin rubayan - Lean Business Services
Course - ISO/IEC 27001 Lead Implementer
The knowledge and understanding of the trainer on the training material was exceptional. The trainer was well aware of the subject, provided practical examples in relevance. I would highly recommend him as a trainer for this training.
Tayyeb Mahmood - Ajman Municipality
Course - COBIT 2019 Foundation
The trainer was extremely clear and concise. Very easy to understand and absorb the information.
Paul Clancy - Rowan Dartington
Course - CGEIT – Certified in the Governance of Enterprise IT
The trainer was very motivated and knowledgeable. The trainer was not only capable of information transfer, she also brought it with humor to lighten the dry theoretical training subject.