Module 12 of 22 · Practitioner · 60 min
PCI DSS 4.0 and P2PE for testers
Scoping, segmentation and what an assessor looks for, framed for someone attacking the environment rather than documenting it.
Enrollment required
Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.
The course is tied to your account, so you sign in first and come straight back here.
One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.
No hardware is sold here, and none is needed to read the course.
Payments are final. Module 1 is free so you can judge the course before you pay. Terms
Already enrolled? Sign in
Open the free workbench →What this module covers
- 01Which document, and which version
- 02Scope is the only concept that matters
- 03Scope, drawn
- 04The scope document is a target list
- 05Encryption does not remove scope
- 06What you may store, and what you may never
- 07The same line, drawn on the bytes
- 08Rendering unreadable, and the trap in it
- 09What the integration handles
- 10When does authorization end
- 11This platform, assessed
- 12P2PE, and how scope shrinks
- 13What a tester is, and is not, allowed to do
- 14What 4.0 changed
- 15Two things that are not true
- 16Writing it up