QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Vellacourt's PCI DSS scope reduction investment case: the true annual price of PCI, £8.1M — £4.2M of compliance cost plus £3.9M of modelled expected loss — falling to about £2.6M with Option B; the cardholder data environment shrinking from 1,340 systems in October to 918 today and to 412 under Option B, 69% against the CFO's 60% target; and the discovery that started it, card numbers in 38 unexpected places including 1.86 million speech-analytics transcripts, now redacted or deleted with two locations left on legal hold, open QSA findings down from 47 to 9 and Option B chosen over A and C.
CY-PRO-083Pro Level · Payment Security and PCI DSS

PCI DSS Scope Reduction Investment Case

Make the investment case that shrinks PCI scope, cost and risk at once.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

  • Establish where card data really is, contain what must never be held, and restate PCI DSS scope from evidence rather than inventories.
  • Price PCI as compliance cost plus expected loss, remove unneeded card data, and choose tokenisation, P2PE, masking and providers by what they genuinely take out of scope.
  • Prove segmentation, govern third parties and use the customised approach only where it serves the objective, with every claim evidenced for the QSA and the acquirer.
  • Compare investment options at the margin against an honest counterfactual and win a Board resolution with tranches, owners, appetite, accepted residuals and a dated review.
Price:৳15,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.