PCI DSS version four is the first major release for nine years, and will affect every organization that stores, processes or transmits payment card data – not least because there are 64 new requirements in the standard with major changes to the encryption of cardholder data, protecting e-commerce websites, system and application accounts, multi-factor authentication, and vulnerability management. In this course, What’s New in PCI DSS 4.0 you’ll discover the important changes to the standard. First, you’ll start with the implementation timeline and that affects how you plan for the changes and your assessments over the next three years. Next, you’ll discover what has changed in all of the twelve principal requirements and meet the 64 new requirements which will be classified based on the degree of change that most organizations will need to be able to meet them. Finally, you’ll learn about the new customized approach which is PCI’s term for objective-based security and consider if that is a route that will work for you. By the end of this course, you’ll be able to evaluate the impact of PCI DSS 4.0 on you organization and start planning your transition to this new version of the Payment Card Industry Data Security Standard.
Author Name: John Elliott
Author Description:
John Elliott is a specialist in regulated security and data protection. His fascination is the way that people engage with security directives: whether that’s a company following external regulation, an information security team developing policies, an IT team following them, or a colleague who is just trying to do their job securely. John has led information security and data protection functions in aviation and financial services. He’s represented both Visa Europe and Mastercard on the PCI S… more

Table of Contents

• Course Overview
  1min
• The Key Changes in PCI DSS 4.0
  29mins
• The New Requirements in PCI DSS 4.0
  37mins
• The Customized Approach
  16mins
• Planning a PCI DSS 4.0 Transition
  11mins