2024 Payment Card Industry Data Security Standard (PCI DSS) Audit Program Review (invitation only)

Volunteers will participate in the review of ISACA’s PCI DSS Audit Program. The objective of the review is to ensure the program has captured the essential audit scope, objectives, and testing steps all to ensure the users can perform an efficient and effective audit of the enterprises’ PCI DSS program to ensure compliance with the standard.

Please note, this opportunity is by invitation only. Applications will not be accepted.

Anticipated Outcomes:

As part of the review, volunteers will:

• Review the program.
  • Using knowledge of the current versions of the PCI standard and related frameworks (e.g., COBIT 2019, COSO, ISO/IEC 27000, ISO/IEC 27001) provide professional opinion about whether content of the audit program is technically accurate.
• Review the program’s figures.
  • Ensure the components are relevant, accurate, and complete. For example has the developed capturedthe appropriate objectives, controls, and testing steps to allow for a comprehensive audit in order to provide a reliable opinion on the entity’s PCI DSS compliance program.

Volunteer Criteria:

• Invitation only
• Familiar with the PCI Standard (Version 4.0)
• Experience assessing PCI compliance or managing PCI compliance programs.
• Mid to senior level audit/assurance work experience.
• Preferred certifications: Any of the qualifications offered by the PCI Security Standards Council (e.g., Qualified Security Assessor, Internal Security Assessor, PCI Forensic Investigator); CISA certification; COBIT Certificates (e.g., COBIT Foundation, COBIT Design and Implementation).
• Knowledge of COBIT 5 and COBIT 2019 either through study of the COBIT framework or through practical work experience using COBIT.
• ISACA Membership not required.

Volunteer Benefits:

• Up to 15 CPE credits (max. 20 annually) in the area of Contributions to the Profession upon successful completion of the term.
• Name listed in ISACA’s PCI DSS Audit Program as an Expert Reviewer.