“Darlene is without a doubt the BEST teacher and presenter I ever had the privilege of listening to! She makes all material understandable even though it is very complex.”
Read More Testimonials
Delap LLP is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website:
www.learningmarket.org
TR-39 (formerly TG-3) Compliance Classes
All classes are 'Group Live' and are held on site at the listed hotels.
Effective 2008, a passing grade is required for all auditors performing a TR-39 (formerly TG-3) review for PULSE or STAR Networks at the processor member level. Auditors receiving a passing grade will also receive a new designation -- CTGA. Examination criteria and relevant information will be provided through each network's normal communication methods. Exam time allowance is four hours. Delap offers the exam several times each year in conjunction with the classes.
Course Contents
Network Security Compliance for PIN and Key Management
Delap LLP
4-Day Core Class
(Basic class - no prerequisites or additional preparation required.)
The 4-day training course is designed to provide both internal and external auditors with the necessary tools to complete the NYCE Corporation, PULSE EFT Association and Star Systems Compliance Reviews.
2-Day Refresher Class
(Intermediate class. Prerequisite - 4 day core class. No additional preparation required.)
After attending the 4-day Core Class, a "refresher" class is required every 24 months. We offer both a 2-day refresher class and a 2-day Remote Key class as described below.
2-Day Asymmetric Key, EMV and E2E Class
(Intermediate class. Prerequisite - 4 day core class. No additional preparation required.)
A 2-day class will be offered to address asymmetric cryptography and the related 'Part 2' of ANSI X9.24 and TR-39 (formerly TG-3) 2006, Section 5 and End-to-End Encryption.
1-Day PCI PIN Class
(CPE 8 credits. Intermediate. Prerequisite - 4 day core class. No additional preparation required.
Obtain an understanding of each control objective in the new PCI PIN Security Requirements Version 1.0 (September 2011) and review mapping of TR-39 to PCI PIN matrix (provided in class)
4-Day Core Course Contents (CPE 32 credits*):
Day One:
- Processor and Auditor Responsibilities
- Compliance Review Objectives
- Network Respondent Forms
- Symmetric Key Management Introduction
- Key Names and Hierarchy
- Cryptogram Notation
- Diagram of PIN Transaction Flow
- PIN Translation
- Characteristics of TRSMs
- Group Project
Day Two:
- Cardholder Authentication Methods
- PIN Block Formats
- Exclusive-or
- Introduction to Symmetric Key Life Cycle, Including:
- Key Check Values
- Single-Length vs. Double-Length Keys
- Single DES vs. Triple DES
- Approved Key Methodologies
- Asymmetric Keys for Distributing Symmetric Keys - high level
- Group Project
Day Three:
- Review and Obtain an Understanding of Each Control Objective in the New ANS X9/TR-39 (formerly TG-3) 2006, Section 4
- Techniques for Measuring Compliance
- Group Project
Day Four:
- Compliance Review Field Work Activities
- General Key Management Documentation
- Reporting the Findings
- Migration to AKB
- Exam
Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes each
Lunch time: 11:30 AM - 12:30 PM (1 hour)
2-Day Refresher Class
(CPE 16 credits*):
- Review and obtain an understanding of each control objective in the ANSI X9/TR-39 (formerly TG-3) 2006, Section 4
- New requirements, e.g. AKB (TR-31)
Day One:
Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes each
Lunch time: 11:30 AM - 12:30 PM (1 hour)
Day Two:
Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes
Lunch time: 11:30 AM - 12:30 PM (1 hour)
2-Day Asymmetric Key, EMV and E2E Class
(CPE 16 credits*):
Day One:
- Concepts of Public Key Infrastructure (PKI)
- Remote symmetric key distribution using asymmetric methods described in ANSI X9.24, part 2 for:
- ATM key loading
- POS key loading
- HSM key loading
- 'Proxy Host' solutions
Day Two:
- Obtain an understanding of each control objective in the ANSI TR-39 (formerly TG-3)current version, Section 5
- Chip Card Technology
- Concepts of contact chip cards for ATM and POS
- Introduction to EMV Specifications documents
- PIN and sensitive data security
Class times: 8:00 AM - 4:30 PM
Break times: morning and afternoon; 10 minutes each
Lunch time: 11:30 AM - 12:30 PM (1 hour)
To View the TR-39 Compliance Course Brochure Click here (PDF)
