The PCI DSS (Payment Card Industry Data Security Standard) training applies to all merchants and service providers that transmit, process, or store payment card data. Clause 12.6 of the PCI DSS mandates that organizations implement a formal security awareness program to ensure staff attends annual security awareness training.