Security Awareness training is required to comply with Payment Card Industry (PCI) Data Protection Standard (DSS) Requirement 12.6 and includes initial training for workers with access to card data, and annually afterwards to ensure that they understand their obligations to protect cardholder data.