Hicham Bachour

 Rule set review: As required by PCI-DSS, reviewing rule set and configuration of the network/ security devices (firewalls, routers, switches) at least every six months.

 Penetration testing: As required by PCI-DSS, performing an internal penetration testing at least once per year or after any significant change.

 Vulnerability Assessment: As required by PCI-DSS, performing vulnerability assessment at least quarterly and after any significant change in the network such as new system installations or product upgrades, and performing vulnerability assessment for any application or tool (Active Directory, exchange, router, firewall, swift, mail filter, web filter, WSUS …)

 Risk assessment: As required by PCI-DSS, performing risk assessment at least annually, for all processes, people, technologies in the cardholder data environment.

 Provide Information Security awareness sessions to all staff members.

 Monitoring DLP logs, SIEM logs, Firewalls logs, Antivirus logs, Sandbox logs, …

 Develop applications using vb.net showing the access rights of any application.

 Develop applications using vb.net that enhance the Data Leakage Prevention solution, and enhance the Antivirus solution, and any security solution.