PCI DSS 4.0.1 Upgrade / Annual Refresher Training Course for Developers

Who should attend

Web Developers, Testers, Software Architects, Development Managers, Technical QA Managers

Prerequisites

Experience of data-driven web development in a language such as Java, C#, VB.NET, PHP. Knowledge of JavaScript would also be useful.

Live, instructor-led online and on-site training

We appreciate that you need flexibility to fit in with new working situations - whether you're an individual, part of a distributed team, or simply have projects and deadlines to meet. 

Our remote training can take place online in a virtual classroom, with content split into modules to accommodate your scheduling challenges and meet your learning goals. Get in touch today to find out how we can help design a cost-effective, flexible training solution.

As soon as it's safe, we'll return to also offering the on-site custom training courses and programmes upon which we've built our reputation.

PCI DSS Update / Refresher

• The importance of PCI DSS compliance
• High-level summary of changes and key goals of PCI DSS 4.0

Key Focus Areas of PCI DSS 4.0

• Flexibility for organisations
• Increasing focus on security over compliance
• Target risk-based approach

Secure Development Life cycle

• Exploring the real risk to your business - what's the worst that can happen?
• Analysing attack surface & Threat Modelling
• Tooling review
• Security testing
• Response Plan review
• Hands-on Session: Authentication and Multi-Factor Authentication (MFA) in PCI DSS 4.0

Overview of Authentication Changes

• Review of new authentication requirements.
• MFA: Why it's important and what’s new in PCI DSS 4.0
• Hands-On Lab

Encryption and Cryptographic Changes in PCI DSS 4.0

• Enhanced encryption and key management practices in PCI DSS 4.0.
• New cryptographic algorithms and minimum key length requirements.
• Hands-On Lab
• Implement encryption of data in transit and at rest following PCI DSS 4.0 recommendations.
• Review encryption protocols and update deprecated methods.

Securing Software Development: Addressing Secure Coding and Vulnerability Management

• Overview of new controls for secure software development lifecycle (SDLC) in PCI DSS 4.0.
• Key considerations for developers (threat modeling, secure code reviews).
• Hands-On Lab
• Reviewing code for security vulnerabilities.
• Best practices for patching and vulnerability management.

Logging and Monitoring Requirements in PCI DSS 4.0

• Changes to logging requirements (enhanced granularity, retention policies).
• Importance of real-time monitoring for detecting anomalies.
• Hands-On Lab

Testing and Validating Compliance: Ongoing Monitoring and Assessment

• Overview of new testing controls (e.g., regular penetration testing, phishing simulations).
• Continuous security testing approaches.
• Hands-On Lab

Wrap-up Discussion

• How developers can ensure their systems remain compliant in the future.
• Best practices for continuous assessment and audit readiness.
• Overview of OWASP Top Ten vulnerabilities (Web Application Security, APIs and more)