Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

CPISI-D

Certified Payment Industry Security Implementer – Developer

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

What is the CPISI-D Training Program?

With the increase in the demand for digital transactions, application developers are innovating payment features continually. In today’s digital evolution, a simple error in software code can create a vulnerability that can result in a data breach. This brings up the need to incorporate resilient secure application development practices right from the first line of the application.

About CPISI-D

CPISI-D is a Secure Application Development Training workshop aimed at developers and architects to build secure applications. The workshop revolves around the two best application security practices, PCI-SSF, and OWASP to train participants on an in-depth security implementation during design, development, testing, and deployment.

Why CPISI-D?

Secure Application Development Training can ensure that security controls are established at every stage of the Software Development Life Cycle and helps to secure payment applications from possible vulnerabilities and remove any redundant codes and functionality.

Who can participate?

The intended audience for this workshop is application developers, architects, application testing teams, and the payment application security enthusiasts with the zeal of learning payment security concepts.

Who Should Attend

CPISI
Alumni

GRC
Specialists

Network

Engineers

SOC Managers
& Analysts

Database
Managers

Database
Managers

Senior Software
Engineerss

Risk Management Specialists

CPISI-D Agenda

Day 1

Introduction to PCI-DSS and payment eco-system

  • Basic Concepts, Background and Recent Events
  • Overview of Payment Card Industry and PCI-SSF standard
  • How to do risk assessment and threat profiling for the application

Security By Design

  • How to process and protect sensitive data, includes detail on encryption, key management, hashing, truncation and tokenization
  • Application authorization and access control feature
  • What to log and how the audit trails needs to be captured

Designing the application for covering common application vulnerabilities

Securing applications from Code Level Vulnerabilities

Security During Development

  • Overview OWASP Top 10 Vulnerability (Web+Mobile)

Overview of the PCI-SSF Requirements

  • PCI-SSF Applications
  • PCI-SSF Requirements (1-12)

OWASP Top 10 Vulnerability Demo

Impact and Mitigation Approach

Mobile Application Security Overview

Secure deployment, maintaining the application security including production support

Key Takeaways

Understand the in-depth concepts of payments ecosystems and payment transaction flow

Gain knowledge on PCI-SSF requirements and respective security control implementations

Learn from use cases of recent payment application breaches

Learn about secure coding and some of the common coding vulnerabilities

Who can participate?

Payment application Developers

Code reviewers

Application head

Application architects

Software Developers

Website Developers

Mobile App Developers

CPISI-D Exclusive

CPISI-D is a comprehensive course covering holistic approaches to build a secure payment application

Provided by trainers with expertise in source code review and experience in handling PCI-SSF compliance

The 2-day session covers a broad scope of major risks and vulnerabilities that the developer needs to be vigilant while building secure payment applications

Want to know more?

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Workshop Participants Testimonial

Trainers stress on participation by candidates made the session lively and enjoyable.

Very useful information and relevant to today’s status.

The training was very useful to understand the payment card industry standard.

The trainer was very knowledgeable and the workshop helped us to gain knowledge necessary for both personal and business development.

Trainers are SME’s, competent and knowledgeable enough to understand, respond and clarify participants queries.

My second CPISI and this was the best.

Request a Call

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Validate your certificate

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Please Note: Certified Payment-Card Industry Security Implementer (CPISI) is an independent payments industry certification offered by SISA for payment security professionals, relating to the Payment Card Industry Data Security Standard (PCI DSS).

The PCI DSS is managed and developed by the PCI Security Standards Council (PCI SSC), who provides its own PCI DSS training and certification programs. SISA is not affiliated with or endorsed by PCI SSC.

For more information about PCI DSS, kindly check PCI SSC’s website at https://www.pcisecuritystandards.org.

Hear what our customers say

Thank you for teaching us about everything specially on every process and technical prospective, the best approach which very understandable to us and make it simple and easy. This greatly help journey for PCI DSS certification. Great appreciated for having us as your student on this workshop. and More power!

Mark Sechang

Infrastructure Security Analyst, Bayad Center

Bayad logo

Instructor is very knowledgeable and passionate about the topic. There is a lot of information subject of the course and the instructor is very knowledgeable. Topics are highly technical and the instructor provided explanations for better understanding of the group particularly those not from IT.

Peggy Salazar

Manager, Data Protection, Philippine Airlines

Philippine Airlines logo

Had a fantastic experience while attended the sessions and all the things were covered. Before attending the training I was not having any idea of PCI DSS. After completing this session got the amazing confidence in this domain so I would recommend anyone if you are looking something that can help with PCI CPISI knowledge just go for it without any doubt.

Anuj Kumar

Information Security Engineer II, NCR Voyix

NCR Voyix logo

The CPISI - Payment Data Security Implementation Online Workshop was a fantastic experience to learn about PCI DSS compliance. I learned a lot of useful information and could definitely apply what I learned here to help my organization be more compliant with the new PCI DSS 4.0 requirments. This was a really excellent training I would recommend to everyone who wants to know specific information about the requirements for PCI compliance.

Jacob Young

SW Engineer II, NCR Voyix

NCR Voyix logo

The workshop educates on PCI DSS implementation policies, reducing data breach, risk, maintaining compliance status for the organization, etc. by using real-world examples and case studies from SISA’s PCI forensic investigations. Experienced trainers deliver the instruction, ensuring quality and confidence in the quality of the learning experience. I have gained more knowledge from the workshop, which is helpful and fulfills my current job performance at APD Bank.

Vanna Mam

SW Engineer II, APD Bank

APD Bank logo

SISA’s CPISI-Payment Data Security Implementation Live Online Workshop wasn’t just informative, it was actionable. The instructors, veterans of both PCI compliance and real-world breach investigations, didn’t just explain the standards, they showed us how to implement them effectively in our own environments. The blend of lectures, case studies, and interactive exercises kept me engaged and learning throughout the two days. I especially appreciated the focus on understanding the “why” behind the controls, not just the “what.” This deeper knowledge has already helped me make smarter security decisions back at my company. If you’re serious about securing your payment data and achieving PCI compliance, skip the generic webinars and sign up for this workshop. It’s an investment that will pay off in stronger defenses and peace of mind.

Lasitha Bandara

Associate Information Security Engineer, TechCERT

TechCERT logo

The learning session significantly strengthened my understanding of application security from a QA perspective, especially in mapping OWASP Top 10 risks to real testing scenarios. The trainer’s use of practical case studies helped translate vulnerabilities into actionable test cases, negative scenarios, and security validations. A key differentiator was the emphasis on design level and business logic flaws, which are often missed during functional testing. This session enhanced my competency in security focused test design, requirement analysis, and defect identification, enabling me to proactively identify and report security risks early in the QA lifecycle.

Manjunanath M

Senior QA Module Lead, Invenco

Invenco logo

This meeting gave us the exposure to learn the security related risks in software development and how to overcome by using various techniques. Trainer skills are good, but I thought 16 hours is insufficient to cover all the topics, so I thought the trainer was rushing it.

Raghavendran Renganathan

Staff Software Engineer, Invenco

Invenco logo

The PCI DSS training improved my understanding of PCI DSS v4.0 and practical compliance. Real-world case studies and the trainer’s expertise were key highlights. This learning will directly support secure payment data handling and compliance in my role.

Amal Alshehhi

Asst. Manager Info and Cybersecurity Governance, RakBank

RakBank logo