PCI DSS Fundamentals: sample practice worksheet

Fictional practice only. Use invented details; do not enter personal, client or confidential data.
This preview is not a completed assessment, legal opinion, audit or certification.

Exercise: Practical Exercise: A Retail Payment Flow
Map a fictional store and online checkout. Identify data exposure points, supplier responsibilities and assessment questions, then prepare a short action and evidence checklist.

1. Describe the fictional organisation, process or system and its scope.

2. Identify three relevant risks or obligations. For each, record a control, owner and evidence you would request.

3. List assumptions, gaps and two questions to ask before relying on the result.

4. Propose one next action and explain how you would check that it worked.

Learning takeaway: A payment data-flow worksheet and merchant responsibility checklist.

This is independent introductory training. Completion does not award PCI SSC's PCIP or QSA credentials, validate PCI DSS compliance or replace the assessment and validation required by an acquiring bank or card brand.

Programme: https://orbixtech.my/training-pci-dss-payment-card-security-fundamentals-malaysia