PCI DSS v4.0.1 Requirement 12.6

PCI DSS Security Awareness

Security awareness for everyone who touches a payment. Cardholder data, secure handling and outages, terminal tampering, payment-focused phishing and incident reporting. Randomized final exam.

$59
4 modules · certificate included
$44.25 a seat at 10+ · save 25% · price your team
What this course does and does not doThis certificate does not certify an organization, system, merchant, service provider, or individual as PCI DSS compliant.
Add 2 more courses and save 10%.

Quick answer

What is PCI DSS Security Awareness?
PCI DSS Security Awareness is online compliance training documenting the requirements of PCI DSS v4.0.1 Requirement 12.6. It costs $59, is self-paced across 4 modules, and issues a dated certificate the moment the trainee finishes.
Who needs it?
employers and safety managers documenting required workplace-safety and HR training for their staff.
Is the certificate verifiable?
Yes. Every certificate carries a unique number that anyone can check publicly at certifiedtrainingusa.com/verify without an account.

What this course covers

01
Payment Data and Shared Responsibility15 min
The Payment Journey; Account Data: Know the Difference; The Cardholder Data Environment; Your Role in Payment Security; Training Evidence Is Not PCI Validation.
02
Secure Handling in Daily Operations15 min
Use Approved Payment Channels; Prevent Unapproved Copies; Mask, Retain and Dispose; Inspect Payment Terminals; Phone, Remote and Card-Not-Present Work.
03
Phishing, Authentication and Access15 min
Payment-Focused Social Engineering; Unique Accounts and MFA; Least Privilege and Role Changes; Third-Party and Support Access; Secure Payment Workstations.
04
Incident Recognition and Response15 min
Recognize Reportable Events; First Authorized Actions; Preserve Evidence and Role Boundaries; Build a Useful Incident Report; Capstone: Tampering and Fake Support.

Who needs this training

This course is for employers and safety managers documenting required workplace-safety and HR training for their staff. It documents the training required under PCI DSS v4.0.1 Requirement 12.6. You can take it as an individual, or buy seats for your whole team from one account.

Instant, verifiable certificate

Your certificate issues the moment you finish, with a unique ID. Any employer or inspector can confirm it at certifiedtrainingusa.com/verify. No waiting for a card in the mail.

Get 10% off your first course

One code, one use, any course. We will also send you the occasional note when a standard changes in a way that affects training you have already bought. Nothing else.

The code applies at list price. It does not combine with team seat discounts or bundles, which are already discounted. Unsubscribe anytime.

Common questions

Can I complete this training online?

Yes. PCI DSS Security Awareness is delivered entirely online and self-paced. The regulation (PCI DSS v4.0.1 Requirement 12.6) requires that the training occur and be documented, which this course satisfies; any hands-on or site-specific portion a standard also requires remains the employer's responsibility.

Do I get a certificate?

Yes. A certificate is issued the moment you complete the course. It carries a unique ID and can be verified by any employer or auditor at certifiedtrainingusa.com/verify.

How long does it take?

The course is self-paced, so you can finish in one sitting or return as your schedule allows. Most learners complete it in under two hours.

Can I train my whole team?

Yes. You can buy multiple seats and manage your team from one account. Training providers can also resell this course under their own brand.

Before you buy, read the background

We publish a sourced guide to this requirement, with the current enforcement figures pulled from our own dataset.

Privacy & Security · 8 min read
PCI DSS Security Awareness Training: What It Actually Requires
PCI DSS is a contract enforced by card brands, not a law. What Requirement 12.6 asks for, where card data leaks, and why scope reduction beats every other control.

Others usually trained alongside this

Same category, same audience. Most sites that need one of these need more than one.

Cybersecurity Awareness / Phishing & Social Engineering
$49
GLBA Safeguards Rule Security Awareness
$79

See all Cybersecurity & Data Compliance courses

Train your team

Set the headcount and the price follows. Volume discount applies automatically, and every seat gets its own redemption code to hand out.

seats
5 × $50.15$250.75
Small team · 15% offsaves $44.25

One redemption code per seat, plus a roster showing who has finished.

Volume discount

5 more seats and the rate drops to $44.25.

25+ seats can be paid on invoice against a PO instead of a card.

Ready to certify?
$59 · certificate included · start now