PCI DSS Requirements & Controls Implementation Training

It is for compliance leads, IT and security managers, control owners, and core and implementation team members, including those in service providers such as BPOs that handle card data for other businesses. Learners new to PCI DSS may start with Sterling Academy's PCI DSS Awareness course, which leads into this one.

It covers Sterling's recommended roadmap; scoping and segmentation in depth; gap assessment and the requirement matrix; running the programme, including roles, policies and targeted risk analyses; requirements 1 to 12 by second-level requirement, with what good looks like; the evidence the assessor asks for and common findings; the appendices and the customized approach; and keeping compliance as business as usual.

The course is planned as 44 video modules and about 5 hours of video, followed by practice questions and a final exam. Video runtimes are approximate, so allow additional time for the practice questions and the exam. With 12 months of access, learners can work through it requirement by requirement at their own pace.

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for PCI DSS Requirements & Controls Implementation Training. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Yes. PCI DSS Requirements & Controls Implementation Training is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

PCI DSS Requirements & Controls Implementation Training has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators track their team's progress. Prices exclude taxes, and Sterling confirms final pricing.

No. The Certificate of Completion is a training certificate: it shows that one person completed PCI DSS Requirements & Controls Implementation Training and reached the pass mark in its final exam. It is not certification of an organisation to PCI DSS, and Sterling does not certify organisations. Compliance is validated through the organisation's own assessment, such as a Report on Compliance by a qualified assessor. This course prepares teams to implement the controls and the evidence that assessment needs.

Yes. The course covers the appendices and the customized approach of PCI DSS v4.0.1, as well as targeted risk analyses as part of running the programme. It then works through requirements 1 to 12 by second-level requirement, showing what good looks like, how to implement it, the evidence the assessor asks for and common findings.