Educause Security Discussion mailing list archives

Re: PCI DSS 3.0 Training Requirements


From: Dan Wasson <dan () NMC EDU>
Date: Fri, 18 Mar 2016 13:42:27 -0400

Also SANS STH.



*Dan Wasson*
*Director Systems & LAN Management*
*Northwestern Michigan College*
*231-995-1164*
*dwasson () nmc edu <dwasson () nmc edu>*

*Don't be a scam victim - NMC and other reputable organizations will never
use email to request that you reply with your password, social security
number or confidential personal information.*

On Fri, Mar 18, 2016 at 12:54 PM, Dewight Fredrick Kramer <
dfkramer () ucdavis edu> wrote:

We have SANS STH for general training for the campus.  As for the PCI
requirements our campus has a homegrown system, for the people wanted a
more tailored to the University environment training.

Thank you,

Dewight F. Kramer
Information Security Consultant
University of California, Davis
One Shields Avenue
Davis, CA 95616
(530)752-1700
dfkramer () ucdavis edu
http://security.ucdavis.edu

On Mar 18, 2016, at 8:28 AM, Burke, Ian R. <iburke () MIDDLEBURY EDU
<iburke () middlebury edu>> wrote:

We are wondering what other institutions are doing to meet the training
requirements put forward by the PCI standards in Req. 12. We have been
working with a homegrown solution but are finding it difficult to maintain.
We are considering replacing it with a purchased, hosted solution but are
concerned about the ROI. Have other schools found a method for streamlining
the homegrown process or found solid ROI from a purchased solution? Thanks.

Ian

Ian Burke
Information Security Administrator
Information Security – ITS
http://go.middlebury.edu/infosec
Middlebury College




Current thread: