top of page

Get Free Advice from Mike

I send out weekly tips on career advice and growing your LinkedIn account so that you are more attractive to recruiters and hiring managers.  Grow, be discovered and get hired.

Thanks for submitting!

Search

Want a Cyber Security Career in GRC? Learn these 12 PCI Requirements

Want a Career in GRC? Start Learning these 12 PCI DSS Requirements:





The GRC (Governance, Risk & Compliance) sector of Cyber Security is in demand. Without GRC, there is no security. The truth is, compliance does not equal security, but it does however drive security. Without it, many companies would lack the proper controls to protect data.


The PCI Framework is one of the strictest frameworks alive. I worked as a PCI QSA for awhile and I will say that if you learn this framework, most of the other frameworks come easy.


Every organization that you swipe your credit card at is bound by PCI rules. These rules are in place to protect cardholder data. There are several levels of PCI Merchants, which some have stricter requirements than others, but that's for another day.


Learning these 12 PCI requirements will help you understand how credit card data should be protected. You don't have to be a PCI QSA to help businesses secure their card data. You simply need to understand the requirements and be able to communicate them in a business language.


There are 6 overall Goals and 12 Requirements per the PCI DSS:


Goals:

1. Build and Maintain a Secure Network and Systems


2. Protect Cardholder Data


3. Maintain a Vulnerability Management Program


4. Implement Strong Access Control Measures


5. Regularly Monitor and Test Networks


6. Maintain an Information Security Policy


Requirements:


1️⃣ Install and Maintain a Firewall Configuration to Protect Cardholder Data


2️⃣ Do not use Vendor Supplied defaults for System Passwords and other Security Parameters


3️⃣ Protect Cardholder Data


4️⃣ Encrypt Transmission of Cardholder Data across Open Public Networks


5️⃣ Protect all Systems Against Malware and Regularly Update Antivirus Software


6️⃣ Develop and Maintain Secure Systems and Applications


7️⃣ Restrict access to Cardholder Data by Business Need to Know


8️⃣ Identify and Authenticate Access to System Components


9️⃣ Restrict Physical Access to Cardholder Data


1️⃣0️⃣ Track and Monitor all Access to Network Resources and Cardholder Data


1️⃣1️⃣Regularly Test Security Systems and Processes


1️⃣2️⃣Maintain a Policy that Addresses Information Security for all Personnel



Each of the 12 Requirements break down into deeper sub-requirements. In total, there are hundreds. You don't have to become an expert in PCI, but the more you learn, the more valuable you become.


🔥 Want a Career in Cyber Security in 2024? Here is how I can help:


I packed 25 years of experience into my Break in Cyber Playbook. It talks about how to break through these barriers to get into cyber, and also how to grow your presence so that you attract recruiters. It takes the career puzzle of cyber security and puts it together for you to make a clear picture. It's no fluff. Click HERE to read it.

99 views

Get Free Advice from Mike

I send out weekly tips on career advice and growing your LinkedIn account so that you are more attractive to recruiters and hiring managers.  Grow, be discovered and get hired.

Thanks for submitting!

bottom of page