# From Tap to Assessment Claim

**Audience:** College and university students, Faculty and student organizations, Interns and early-career practitioners  
**Duration:** 60 minutes  
**Program:** WACK-CAMPUS-0001

## Session outcome

One fictional payment narrative, one scope-and-responsibility sketch, one claim-evidence record, and one safe portfolio next step.

## Run of show

1. Ten minutes: follow a fictional tap through authorization, settlement, refund, support, and failure.
2. Ten minutes: identify systems, providers, identities, people, and security influence.
3. Ten minutes: separate customer, provider, shared, assessor, and accepting-authority roles.
4. Ten minutes: challenge one claim using subject, period, evidence, test, and decision authority.
5. Ten minutes: compare a vulnerability scan, penetration test, control test, and assessment conclusion.
6. Ten minutes: convert the work into a sanitized portfolio artifact and role-based learning plan.

## Facilitator boundary

W/ Campus is independent practitioner education. It is not an accredited course, official PCI SSC training, a PCI SSC qualification, a PCI DSS assessment, permission to test a real system, or a hiring guarantee. Exercises use fictional or explicitly sanitized environments and must never collect account data, credentials, sensitive architecture, or client evidence.

Do not ask participants to disclose real card data, credentials, incidents, client material, restricted architecture, or systems they are not authorized to test.