PCI DSS: Security Awareness Program
The security awareness program is to be given to each employee of
the company on a yearly basis. The goal of the program is to educate
employees so that they can handle cardholder data in a safe and
secure manner. The Security Awareness Program (SAP) must begin at
the moment a new employee begins working at the merchant’s
location. Therefore incorporated into the program are
recommendations for initial instruction and ongoing instruction.
THE SAP must consist of three equally important components or
phases:
1. Instructions and education upon hire
2. Acknowledgement by the employee of the specific policies and
elements of the Security Awareness Program
3. Ongoing training with at least an annual education component.
A powerpoint presentation is included for utilization.
...

March 26, 2012 






