Developer Learning Paths: PCI Developer Learning Path
Curriculum Overview
The PCI Developer Learning Path is designed for those responsible for developing applications that process credit and debit card payments and/or any type of cardholder data.
PCI Developer learning path provides learners with the tools required to meet the Payment Card Industry Data Security Standards (PCI DSS) for systems that transmit, process, and/or store cardholder data. Courses provide a framework for developing secure applications, explain testing procedures and provide guidance for mitigating issues.
Core:
(15 courses, 7.3 hours, 7 CPE credits)
- Fundamentals of Application Security
- Fundamentals of Secure Development
- Fundamentals of Secure Database Development
- Fundamentals of Secure Cloud Development
- PCI DSS v3.2 Best Practices for Developers
- Applying OWASP 2017: Mitigating Injection
- Applying OWASP 2017: Mitigating Broken Authentication
- Applying OWASP 2017: Mitigating Sensitive Data Exposure
- Applying OWASP 2017: Mitigating XML External Entities
- Applying OWASP 2017: Mitigating Broken Access Control
- Applying OWASP 2017: Mitigating Security Misconfiguration
- Applying OWASP 2017: Mitigating Cross Site Scripting
- Applying OWASP 2017: Mitigating Insecure Deserialization
- Applying OWASP 2017: Mitigating Use of Components with Known Vulnerabilities
- Applying OWASP 2017: Mitigating Insufficient Logging and Monitoring
Advanced:
(14 courses, 8 hours, 8 CPE credits)
- Insecure IoT Web Interfaces
- Insecure IoT Authentication and Authorization
- Insecure IoT Network Services
- Insecure IoT Communications
- Insecure IoT Mobile Interface
- Insecure IoT Firmware
- Fundamentals of Cryptography
- Securing Network Access
- Securing Operating System Access
- Securing Cloud Instances
- Application, Technical and Physical Access Controls
- Fundamentals of Threat Modeling
- Testing for CWE SANS Top 25 Software Errors
- How to Perform a Security Code Review
* Generally speaking one-hour of training is equal to one CPE credit; please check with the governing body to determine eligibility for filing CPE credit claims.