|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/pci-dss-internal-security-assessor-isa-practice-exam/
课程评论：没有评论
**课程名称：** PCI DSS 内部安全评估师 (ISA) 练习考试 **课程概述：** 本课程旨在帮助学员掌握内部安全评估师 (ISA) 的相关知识和技能，以便为所在公司进行内部合规性审计，并识别与 PCI DSS 合规性相关的改进项。学员在注册官方考试前，需获得公司的支持。此认证将使您能够成为公司与外部 PCI 审计师（如合格安全评估师 QSA）之间的沟通桥梁。 **课程内容：** * **练习考试：** 包含 60 道选择题和 40 道附加题。 * **PCI DSS 基础知识入门：** 在参加 ISA 官方考试前，必须完成在线的 PCIDSS 基础知识入门课程并合格。 * **PCI DSS 要求与合规性报告 (ROC)：** 官方提供的为期两天的课程将详细讲解 PCI DSS 的各项要求以及合规性报告 (ROC) 的具体内容。 * **年审更新：** 与合格安全评估师 (QSA) 认证类似，ISA 认证也需要进行年度重新认证。 **资格认证流程：** 1. **赞助公司资格认证：** 候选公司需提交完整的赞助公司申请包，包括已签署的赞助方证明。 2. **ISA 资格认证：** * 由赞助公司负责为候选员工（ISA 候选人）提交培训申请，支付相关培训费用。 * 成功完成 ISA 培训和考试。 * ISA 候选人通过门户网站接受 ISA 证明。 3. **年度重新资格认证与良好信誉维护：** * **赞助公司：** 需满足特定要求，包括支付相关培训费用。 * **ISA：** 需成功完成所有要求的 ISA 重新认证培训和考试。 **重要提示：** * 在注册官方考试前，请务必获得您所在公司的支持。 * 有关 ISA 培训班和考试的更多信息，请参考 PCI DSS 安全委员会官方网站。
The Internal Security Assessor qualification was designed to help people perform internal audits for their own company and to make a list of fix items as they relate to PCI DSS compliance. You should be sponsored by your company before registering for the official exam with the Security Council. This certification will enable you to act as a go-between with external PCI auditors such as a Qualified Security Assessor (QSA) and your company.The practice test is 60 multiple choice questions and a second test with 40 bonus questions. Before taking the ISA exam with the security council, students will need to take and pass the online PCI fundamentals primer before completing the qualification course. The security council offers a 2-day course that will cover the PCI DSS requirements and what the Report on Compliance (ROC) entails. After completing the class, you can take the test and annual re-certification will be required similar to the Qualified Security Assessor certification. Please refer to the PCI DSS Security Council website for more information regarding ISA training classes and exams.The qualification process involves the following three primary steps (described further below):1. Sponsor Company Qualification: The candidate organization must apply for qualification as a Sponsor Company. Applying for qualification requires submission of a complete Sponsor Company Application Package (defined in Section 1.2.1 below), including executed Sponsor Attestation. Sponsor Company qualification occurs once the above has been processed and the applicant has been notified by PCI SSC.2. ISA Qualification: The process whereby employees of Sponsor Companies may be trained, tested, and ultimately qualified as PCI SSC-approved "Internal Security Assessors" or "ISAs." ISA qualification registration on behalf of the ISA candidate is achieved by its supporting Sponsor Company employer (by submitting a training request through the Portal), payment of applicable ISA Program training fees by the Sponsor Company (see Website for ISA Program Fees), successful completion of ISA training and examinations, and the ISA candidate accepting the ISA Attestation through the Portal.3. Annual Re-Qualification and Good Standing: To maintain "Good Standing," a Sponsor Company must satisfy the requirements in Section 2.2, including but not limited to payment of applicable ISA training fees. To maintain "Good Standing," an ISA must satisfy the requirements in Section 3.3, including but not limited to successful completion of all required ISA requalification training and exams.
