PCI DSS v3 SAQ workshop in London helps implementers get to grips with compliance

IT Governance, the fast-growing cyber security services provider and a PCI QSA company, has launched a new one-day PCI DSS v3 SAQ Workshop in London.

ELY, CAMBRIDGESHIRE, UNITED KINGDOM, September 30, 2014 /EINPresswire.com/ -- IT Governance, the fast-growing cyber security services provider and a PCI QSA company, has launched a new one-day PCI DSS v3 SAQ Workshop in London. It is designed to provide delegates with the practical knowledge required to complete the new PCI DSS v3 self-assessment questionnaires (SAQs) and ensure full compliance with the PCI DSS v3 in 2015.

Geraint Williams, senior consultant and QSA at IT Governance, says, “With the introduction of new eligibility criteria and more complex documents, completing the SAQs can be challenging. Our new workshop is designed to help merchants and service providers fulfil the requirements of the new SAQ process with confidence and ease.”

The case for complying with the PCI DSS as a minimum security requirement has been given even greater weight by the latest big data breach, which hit US retailer Home Depot. It has been established that the company failed to meet key PCI DSS requirements. The retailer allegedly conducted vulnerability scans irregularly on the computer systems inside its stores, and often scanned only a small number of stores.

The Payment Card Industry Data Security Standard (PCI DSS) requires large retailers like Home Depot to conduct scans at least once per quarter to maintain their compliance. The PCI Council requires that approved, third-party qualified security assessors (QSAs) perform routine tests to ensure that merchants are compliant.

Merchants and service providers need to understand and fulfil the above and the rest of the PCI DSS v3 requirements in order to complete the relevant SAQs. For many organisations, this is not an easy task. For example, the new version of the Standard has introduced both new SAQ eligibility criteria and new and more complex SAQ documents. Merchants who previously completed SAQ A – which only had 13 questions – may now have to complete the new SAQ-EP, which has 139 questions. Larger merchants with multiple payment systems will be required to submit more than one type of SAQ and satisfy additional requirements such as penetration testing.

The next course is scheduled for 15 December 2014 in London. Bookings can be made online at www.itgovernance.co.uk/shop/p-1638.aspx.

The PCI DSS v3 Workshop is the latest addition to the IT Governance PCI DSS training programme, which includes PCI Foundation and PCI Implementation training pathway.

Desislava Aleksandrova
IT Governance Ltd
00448450701750
email us here