(Music) Hello.
My name is John Elliott.
Welcome to the course, PCI DSS: Securing Data, Systems, and Applications.
In this course,
I bring together the theoretical knowledge of PCI DSS requirements 5 and 6,
along with the practical experience of how the standard really works.
And I'm Jacob Ansari.
I'm a Qualified Security Assessor or QSA with Schellman and Company,
and I'm qualified to assess many of the PCI standards including PCI DSS,
PA DSS, and PDPD.
I've been an assessor for 14 years and have been doing this
since the predecessor standards to PCI DSS.
In this course we will firstly look at the DSS requirement to have
antivirus or antimalware software installed on any system that can
affect the security of cardholder data.
And then we're going to talk about three of the most important
security needs; vulnerability management,
change control, and application security.
This is the area where organizations most often fail and therefore
how criminals break in to steal cardholder data.
For each PCI DSS requirement, I'm going to cover what the standard says,
what it means, and what will be assessed by a QSA.
Then Jacob and I will discuss some of the key practical
aspects of getting compliant and being assessed.
Ideally,
you'll already understand the basics of payment card processing and PCI DSS,
but if you just want to get to grips with the requirement,
you'll be able to jump straight in with no problems.
By the end of this course,
you'll have a great understanding of both the theory and the
practice to help you implement the PCI DSS requirements that
apply to securing logical assets.
We do hope you will join us to learn the theory and practice behind
PCI DSS requirements 5 and 6 with the Securing Data: Systems and
Applications course here at Pluralsight.