PCI Compliance Training and Tools

For merchants, acquirers, processors, and other payments industry entities, the PCI Security Standard Council (PCI SSC) has a number of valuable resources designed to provide guidance and assistance for the assessment.

PCI training programs

PCI Awareness training program

Open to anyone interested in learning more about PCI, specifically employees of organizations that must comply with PCI DSS or have a vested interest in the Payment Card Industry. These organizations may include retail, hospitality, airline, e-commerce, banking, healthcare, and service companies.

PCI Acquirer training program

Open to acquirers and processors looking to deepen their understanding of the PCI DSS to better assist their merchant clients in their security and compliance efforts.

PCI Internal Security Assessor (ISA) program

Trains security professionals to improve their skills and support their organization’s understanding of PCI DSS and validate and maintain compliance by enhancing the quality and consistency of PCI DSS self-assessments, supporting the consistent application of PCI DSS measures and controls, and facilitating interactions with Qualified Security Assessors (QSAs).

Payment Card Industry Professional (PCIP)

Provides an individual credential for industry professionals who demonstrate their expertise in and understanding of PCI standards. The qualification stays in effect as long as the individual continues to meet program requirements and is not affected by changes in employment.

Qualified Integrator and Reseller (QIR)

Provides payment application developers, integrators and resellers with the tools to assist merchants and industry participants in installing and configuring validated payment systems in a manner that facilitates PCI DSS compliance.

To learn more about training programs, visit the PCI SSC website.

Useful tools and resources for PCI DSS assessment

PCI Prioritized Approach Tool

Provides six security milestones that will help you incrementally protect against the highest risk factors and escalating threats while on the road to PCI DSS compliance. It offers a roadmap to address its risks in priority order and a “quick wins” pragmatic approach, as well as helps promote measurable progress indicators and consistency among Qualified Security Assessors. You may find the PCI Prioritized Approach Tool in the PCI SSC Document Library.

PCI SSC Small Merchant Resources

Educates small merchants on the relevancy and importance of basic payment security requirements to protect themselves and their customers. This also is a great first step toward familiarizing them with compliance requirements related to PCI Data Security Standard (PCI DSS).

For additional PCI SSC resources, including information supplements to help organizations work toward or align with PCI standards, please visit PCI SSC Merchant Resources.