Payment card data is one of the most targeted types of information in the world. Criminals want it, regulators expect it to be protected, and customers trust organisations to handle it responsibly. The Payment Card Industry Data Security Standard, known as PCI DSS, exists to set clear expectations for how cardholder data must be handled and protected.
This course provides a practical understanding of PCI DSS, starting with the fundamentals and building towards a more detailed understanding of compliance and responsibility. It is designed to help you understand not just what the rules are, but why they matter, and how everyday actions can either support or undermine payment card security.
By the end of this course you will have learned about:
- What PCI DSS is, why it exists, and who it applies to
- The roles of those involved, and the responsibilities organisations and individuals have when handling cardholder data
- What information can and cannot be stored
- Where and how payment systems are used, what can go wrong, and how card data can be compromised
- Different payment environments and their weaknesses