PCI DSS Training Resources

The UISO is committed to supporting the efforts of the Office of the Treasurer in the pursuit for and maintenance of PCI compliance.

2010 PCI DSS Workshop

Ruth Harpool (Office of the Treasurer) and Chad Marcum (UISO) co-presented a workshop about PCI DSS in the fall of 2010. It is broken apart into three sessions:

Workshop files

Supplemental resources:

Note: Sessions were recorded using Adobe Connect (formerly Breeze).

Other PCI DSS Resources

Security & Policy Blog Posts

  • OpenSSL vulnerability made public on JUly 9, 2015 does not impact current popular linux distrubitons
  • The GHOST vulnerability allows an attacker to remotely take control of a system.
  • Drupal announced the availability of a patch to fix a critical SQL injection vulnerability in Drupal 7.
  • Creating and maintaining a disaster recovery plan for departments and thier critical services

    Recent Security Bulletins

  • RCE vulnerability in OpenFont support for all versions of Windows
  • Notice of a zero-day vulnerability in Oracle's Java has been made public
  • Multiple Zero-Day Flash vulnerabilities.
  • A critical vulnerability in Microsoft's HTTP.sys component may lead to remote code execution.