[Autogenerated] Hello.
Welcome to P.
C.
Idea says infrastructure security.
I'm John Elliott,
and together we're going to look at Requirements Wall and two of PC Idea Seth,
which are the ones focused on building a secure infrastructure.
Before we dive into the PC ideas s requirement.
I just want to quickly go over how this course works.
If you've seen this introduction on another of my PC idea says courses,
then you'll find to skip this clip.
If you haven't, this will only take a couple of minutes.
You see, learning about PC ideas s could be a bit boring altogether.
There are about 300 individual sub requirements.
And as you expect, I'm going to talk about each one.
When I did Mike USA training many years ago,
what the instructor did was read out each requirement justice.
It was printed in the standard like this requirements 8.1
point four removal disciple inactive years accounts where
they'd binti days at a questions.
Now, as I'm sure you agree,
that's perhaps the most dull training course you can imagine.
So I'm not going to do that.
Instead,
I wanted to make sure you've downloaded a copy of the
latest version off PC idea cess from the P.
C.
I.
S s C website.
He the printer out or have it open in another window so you can refer to it.
When you look at the standard,
you'll see that each sub requirement is split into three sections.
The sub requirement itself, the testing procedure and finally,
the guidance section, which describes the intent behind the requirements.
As I talk about each sub requirement,
I'm going to briefly summarize the point of the requirement,
the guidance and what JK USA will look for it when they do an assessment.
Then when we get to the end of a number of PC ideas s requirements were
going to join the discussion I had with Jacob and sorry,
who's one of the most experienced que essays on the planet.
Jacob and I will discuss the real world issues you need to know about when
implementing PC Idea says we'll talk about common problems.
What Q I say is look for and how security breaches happen.
So I hope at the end of the course,
you'll understand both the theory on the practice of PC ideas s to get the
best out of the course you need to understand PC idea says concepts such as
What Pan is the cardholder data environment on P.
C.
I.
D.
S s roles, such as Qualified security assesses.
If you're a bit unsure about any of these foundations than my plural site PC,
Idea says, the big picture course will help.
Sometimes I'm going to need to refer to PC idea sets requirements in
the context of a network or system components.
So I've invented a network for an imaginary merchant that accepts
card payments in physical stores and on the Web.
In each store there's a point of sale system,
a local server that collects payment data,
which events sends over a VPN to a payment server at head office,
which talked to the bank for authorization and settlement.
Once the transaction's been authorized.
All transaction details, including payment card, ater a store, their database.
There's also an e commerce channel,
which consists off an e commerce Web server at head office,
sitting inside the D M Z,
which also talked to the payment server through a firewall.
There's also a separate network used to manage the cardholder data environment,
which is self is segmented from the corporate
network and has no access to the CD A.
Of course, your network probably doesn't look anything like this,
but it will have the same sort of things in it and most importantly,
the different types of components.
There's the cardholder data environment,
where cardinal the data is stored,
processed or transmitted their systems that are connected to or
that can affect the security off the cardholder data
environment and systems that are intended to be out of scope of
the PC idea sets requirements.
That's the end of talking about how the course is structured.
So now it's time to look at Requirement one of PC ideas s.