What does PCI DSS require for developer security training?
- A.Developers must pass a vendor certification exam once in three years, covering injection flaws and the memory safety rules of each language in the developer toolchain
- B.Developers must receive training at hire, covering the company code of conduct and the incident reporting process
- C.Developers must attend a security awareness briefing twice a year, covering phishing and password hygiene
- D.Developers must receive training in secure coding techniques at least annually, covering relevant vulnerabilities and secure development practices
Why D is correct
Developers must receive annual training on secure coding techniques relevant to their programming languages and development frameworks.
Know someone studying for PCI DSS? Send them this one.