One of the things I’ve noticed during my time in the (secure) payments industry is the lack of true understanding about why things are the way they are.  Some people have a perspective from a merchant, and others from that of a service provider, vendor, or analyst.  Even fewer people can give their perspective from that of a card brand.  It is this drought of information that leads to fear.  Fear of the standard, fear of the “solutions”, and fear of the unknown.

As Yoda once said, “Fear leads to anger … anger leads to hate … and hate leads to … suffering.”  I don’t want anyone to suffer longer than they have already, which is why I’m a big advocate of educating oneself, as much as possible, about the industry.  If you’re a friend of mine and have any bit of patience you have head me talk about the payment card industry.  But what if you didn’t just offer to buy me a beer?  What if you want a boot camp course on the nuances of the PCI DSS?

For this, I recommend you look at the CPISM/CPISA certification classes taught by the Society of Payment Security Professionals.  I highly recommend taking one of these courses as it is brought to you by the good people at The Aegenis Group, a company that has performed industry training on this topic for several years.