EMFAD Courses

Cybersecurity

PCI DSS and Payment Security Essentials

Understand how card data flows, define and reduce your PCI DSS scope, choose the right SAQ and run the controls that keep card payments secure and compliant.

  • Beginner
  • About 6 hours
  • 4 modules
  • 15 lessons
  • Certificate of completion

About this course

Secure card payments the right way. Understand PCI DSS requirements, scope, tokenization, and best practices for compliant card processing.

What you will learn

  • Trace a card payment from cardholder to issuer and identify where card data is exposed
  • Define the cardholder data environment and decide which systems are in scope for PCI DSS
  • Explain the twelve PCI DSS requirements and what each one demands in practice
  • Select the correct Self-Assessment Questionnaire for a given payment setup
  • Reduce scope and risk using tokenisation, point-to-point encryption, outsourcing and segmentation
  • Prepare compliance evidence and respond correctly to a suspected card data breach

Curriculum

Module 1Payment Security Landscape4 lessons
  1. 1How Card Payments Flow Free preview
  2. 2Why PCI DSS Exists
  3. 3Scope: Where Card Data Lives
  4. 4Merchant Levels and SAQ Types
  5. QModule quiz (4 questions)
Module 2The Twelve Requirements4 lessons
  1. 5Network Security Requirements
  2. 6Protecting Stored and Transmitted Data
  3. 7Vulnerability and Patch Management
  4. 8Access Control and Monitoring Requirements
  5. QModule quiz (4 questions)
Module 3Reducing Scope and Risk4 lessons
  1. 9Tokenisation and Encryption Options
  2. 10Outsourcing to Compliant Providers
  3. 11Segmentation Strategies
  4. 12Common Compliance Failures
  5. QModule quiz (4 questions)
Module 4Staying Compliant3 lessons
  1. 13Evidence, Audits and Assessments
  2. 14Incident Response for Card Breaches
  3. 15Course Project: Scope and SAQ Mapping
  4. QModule quiz (4 questions)
PFinal project: Map Card Data Flows, Define Scope and Choose the Right SAQ

Who this course is for

  • Owners and managers of businesses that accept card payments in store, online or by phone
  • IT, security and compliance staff at merchants, payment gateways and fintech start-ups
  • Developers and product teams who build checkout pages and payment integrations

Requirements

  • A computer with internet access and a PDF reader for the free PCI SSC documents
  • Basic understanding of how businesses use computers and networks; no security background needed
  • Optional: access to your own organisation's payment setup to apply the exercises

What is included

Written lessons

15 lessons, each with a practical exercise and key points to remember.

Module quizzes

A short quiz at the end of each module. Pass mark 70%, and you can retake it.

Final project

Map Card Data Flows, Define Scope and Choose the Right SAQ. A practical brief with steps and a way to check your own work.

Certificate

A certificate of completion from EMFAD Courses with a unique code anyone can verify.

How the certificate works

Complete every lesson and pass every module quiz with 70% or more. Your certificate then appears in your learner area, ready to print or save as PDF. It shows your name, the course title, the completion date and a unique code. It is a certificate of completion from EMFAD Courses, not an accredited qualification.

More in Cybersecurity

All →

Cybersecurity

Cybersecurity Fundamentals

Protect systems and data. Learn core security concepts, common threats, and defenses every professional and business needs…

ExpertAbout 7 hours16 lessons

USD 89

Cybersecurity

Digital Forensics Introduction

Investigate security incidents. Learn evidence collection, analysis, and reporting to trace and understand digital attacks.

BeginnerAbout 6 hours15 lessons

USD 39

Cybersecurity

Identity and Access Management

Control who accesses what. Master authentication, authorization, single sign-on, and least-privilege to secure users and…

BeginnerAbout 6 hours15 lessons

USD 39