A tailored course, built for your situation
Premium engagement picks with PCI DSS expertise
Access higher-margin project opportunities by mastering payment security compliance in complex financial environments
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Missing out on strategic compliance projects despite deep delivery experience
Who this is for
Senior Project Manager in financial services with responsibility for governance, risk, or compliance initiatives
Who this is not for
Individuals seeking entry-level compliance knowledge or those without project leadership responsibility
What you walk away with
- Lead PCI DSS scoping and control alignment sessions with confidence
- Position for internal project assignments with strategic visibility and larger budgets
- Produce audit-ready documentation faster using standardized templates
- Navigate gap assessments with a repeatable evidence-collection playbook
- Differentiate your profile for cross-functional leadership roles
The 12 modules (with all 144 chapters)
Module 1. Defining the PCI DSS project boundary
Establish clear scope for payment card environments using real-world segmentation patterns and boundary documentation.
12 chapters in this module
- Identify cardholder data flows
- Map card data storage locations
- Classify connected systems
- Define scope reduction opportunities
- Document scope boundary artifacts
- Validate segmentation with network diagrams
- Engage infrastructure teams early
- Clarify shared responsibilities
- Use case: retail banking integration
- Use case: third-party processor onboarding
- Control boundary checklist
- Stakeholder alignment script
Module 2. Building the compliance work plan
Structure a realistic timeline for assessment, remediation, and reporting aligned to audit cycles.
12 chapters in this module
- Assess current control maturity
- Prioritize gap remediation efforts
- Estimate effort for evidence collection
- Assign control ownership clearly
- Integrate with change management
- Forecast resource needs
- Align with fiscal reporting
- Milestone tracking dashboard
- Risk register integration
- Exemption request process
- Timeline negotiation script
- Executive status reporting
Module 3. Executing network segmentation controls
Implement and validate technical barriers to reduce PCI scope and improve security posture.
12 chapters in this module
- Design flat network segmentation
- Configure firewall rule sets
- Document segmentation architecture
- Test segmentation effectiveness
- Validate with network scans
- Maintain segmentation diagrams
- Update after infrastructure changes
- Coordinate with network team
- Case study: cloud migration
- Case study: offshore expansion
- Audit walkthrough script
- Evidence retention checklist
Module 4. Managing access control requirements
Align identity management practices with PCI DSS access obligations for systems in scope.
12 chapters in this module
- Identify in-scope systems
- Define user access tiers
- Enforce multi-factor authentication
- Implement least privilege access
- Automate access reviews
- Document access policies
- Integrate with IAM platforms
- Test access revocation
- User provisioning workflow
- Segregation of duties rules
- Logging access changes
- Prepare for access sampling
Module 5. Conducting vulnerability management cycles
Schedule and execute regular scans, remediate findings, and demonstrate ongoing diligence.
12 chapters in this module
- Schedule external scans
- Run internal vulnerability scans
- Classify vulnerability severity
- Assign remediation ownership
- Track patching progress
- Document compensating controls
- Validate fixes with rescans
- Maintain scan history
- Integrate with ticketing
- Report scan results
- Handle false positives
- Prepare for QSA validation
Module 6. Implementing encryption and key management
Protect stored and transmitted cardholder data using compliant cryptographic controls.
12 chapters in this module
- Identify data at rest locations
- Identify data in transit paths
- Select approved encryption methods
- Manage encryption keys securely
- Document key rotation process
- Store keys separately from data
- Validate encryption coverage
- Test decryption workflows
- Audit key usage logs
- Integrate with HSMs
- Case study: payment gateway
- Encryption evidence checklist
Module 7. Aligning incident response to PCI DSS
Integrate breach detection and response planning with compliance obligations.
12 chapters in this module
- Define incident thresholds
- Update incident response plan
- Integrate with security operations
- Notify acquiring banks
- Preserve forensic data
- Coordinate with legal
- Report to QSA if required
- Document post-incident review
- Conduct tabletop exercises
- Test detection logic
- Maintain response playbooks
- Evidence collection protocol
Module 8. Producing the self-assessment report
Compile accurate, audit-ready documentation for internal and external review.
12 chapters in this module
- Select correct SAQ type
- Gather control evidence
- Document control operation
- Validate evidence completeness
- Obtain management attestation
- Submit to acquirer
- Archive supporting files
- Track submission dates
- Integrate with GRC platform
- Use template: SAQ A-EP
- Use template: SAQ D
- Review cycle checklist
Module 9. Working with Qualified Security Assessors
Prepare for and manage external assessment engagements efficiently.
12 chapters in this module
- Identify QSA engagement need
- Select qualified assessor
- Scope assessment coverage
- Prepare documentation package
- Schedule fieldwork sessions
- Coordinate team availability
- Respond to findings
- Review draft report
- Negotiate remediation timelines
- Obtain final validation
- Maintain assessor relationship
- Evidence follow-up log
Module 10. Documenting policy and procedure compliance
Maintain up-to-date, organization-specific policies that satisfy PCI DSS requirements.
12 chapters in this module
- Write data retention policy
- Draft firewall configuration policy
- Update incident response policy
- Publish change management policy
- Maintain policy review cycle
- Secure policy approval
- Distribute to stakeholders
- Align with ISO 27001
- Version control process
- Policy exception tracking
- Archive historical versions
- Policy compliance checklist
Module 11. Integrating PCI DSS with broader compliance programs
Leverage PCI work to strengthen other governance and risk frameworks.
12 chapters in this module
- Map to ISO 27001 controls
- Align with SOC 2 requirements
- Extend to cloud security
- Support NIST CSF implementation
- Inform GDPR compliance
- Enhance third-party risk reviews
- Feed into enterprise risk register
- Cross-train audit teams
- Develop unified control library
- Reduce duplication across audits
- Create shared evidence repository
- Build compliance compounding
Module 12. Driving continuous compliance maturity
Establish ongoing monitoring, review, and improvement practices.
12 chapters in this module
- Schedule quarterly control checks
- Automate evidence collection
- Track KPIs for compliance health
- Benchmark against industry peers
- Update scope for system changes
- Conduct annual policy review
- Refresh training materials
- Optimize remediation workflows
- Reduce assessment effort over time
- Expand team ownership
- Document process improvements
- Celebrate compliance milestones
How this maps to your situation
- Leading internal PCI scoping initiative
- Preparing for QSA assessment
- Reducing third-party vendor costs
- Expanding project influence across risk domains
Before vs. after
Before
Reactively assigned to compliance tasks without control over project selection or scope
After
Proactively leading high-impact, well-resourced PCI DSS initiatives across the organization
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per week over 12 weeks to complete all modules and apply templates
If nothing changes
Continuing to miss strategic project opportunities and staying siloed from enterprise-wide risk initiatives despite proven delivery capability
How this compares to the alternatives
Unlike generic compliance courses, this program focuses specifically on PCI DSS execution in financial services environments, with templates and workflows designed for Macquarie-scale complexity.
Frequently asked
Who is this course for?
Senior project managers in financial services leading or aspiring to lead PCI DSS compliance initiatives.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Will this help me get certified?
This course builds practical execution skills for PCI DSS, not exam prep for certifications like CISM or CISA.
$199 one-time. Approximately 3 hours per week over 12 weeks to complete all modules and apply templates.
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours