Lesson 1: Why the rule exists · 4 min
Explain why card data is targeted and what PCI DSS is.
Learners prepare on their own, you answer questions live, and the surveys tell you what stuck. 6 fields to fill in with your own policy, contacts and locations; each one is highlighted inside the course.



What learners can do at the end of each lesson. Minutes are an estimate.
Explain why card data is targeted and what PCI DSS is.
Identify cardholder data vs sensitive authentication data.
Apply allowed vs prohibited card-handling practices.
Inspect payment terminals for tampering and substitution.
Respond to suspicious people and devices and report incidents.
Report · Practical evaluation sign-off
10 questions, 80% to pass. The result is saved to the learner's record.
Based on: PCI DSS v4.0.1 (June 2024) - req. 12.6.1-12.6.3.2 (security awareness at hire + every 12 months), 9.5.1-9.5.1.3 (POI dev…