The Payment Card Industry Data Security Standard 4.0 (PCI DSS 4.0) is barreling down on us.

Michal Tutko, a Qualified Security Assessor (QSA) talked with us about new requirements of PCI DSS 4.0.

Anyone who touches payment card data is required to be certified. The QSA is the one who attests to a company’s compliance. What the QSA says goes.Changes to the standard not only matter to companies handing cardholder data, but one change in particular opens a door to companies selling cutting edge technologies. This has never been permitted before. There are also implications for pen testers who may need to test against newer technologies.

Due to the amount of important information concerning the subject, this is a 2 part podcast.