Course Description
In this course, you will learn how to use the CWE-311 guidelines to identify, test and mitigate for missing encryption of sensitive data. Coverage includes techniques for spotting missing encryption through code review and testing. Secure coding best practices are included, as well as descriptions of technology-specific weaknesses as appropriate. This course requires basic knowledge of client-server applications, web applications, the Software Development Life Cycle (SDLC), cryptography, and the STRIDE model.
Learning Objectives
On successful completion of this course, learners should have the knowledge and skills to protect stored cardholder data to ensure compliance with PCI DSS requirements.