PCI DSS and Security: The Podcast
In the first Down the Security Rabbithole podcast for 2015, Tenable’s Jeff Man joins the hosts in a lively and engaging discussion about the truths behind the Payment Card Industry Data Security Standard (PCI DSS) and some of the common PCI myths in PCI DSS and Security (Yes, Really). Jeff also talks about the impact of the latest technologies (EMV, P2PE, and tokenization) on PCI, and what’s new in PCI DSS version 3.
“PCI DSS … is a pretty decent framework and it’s a pretty solid set of standards that you can build a security program from … I think one of the challenges of PCI is the way that the exercises become not how do we secure the environment but how do we scope things out so that we don’t have to subject all of our systems or so much of our network and our environment to the PCI scrutiny … Use PCI as an opportunity to have a discussion about security because that’s what it’s about at the end of the day.”
Related Articles
Tenable Cloud Security To Help Fed Agencies Tackle Cloud Challenges as It Nears FedRAMP Authorization
July 31, 2024As federal agencies adopt a cloud-first policy, they face unique challenges in securing cloud infrastructure. Learn how Tenable Cloud Security, which is now FedRAMP "In Process," can help.
Tenable Customer Update about CrowdStrike Incident
July 19, 2024Please read this important customer update about CrowdStrike's recent incident.
Tenable Announces Former Senior Administration Officials to Inaugural Public Sector Advisory Board
July 18, 2024Rob Joyce and Mark Weatherford will help Tenable shape federal cyber and AI policy
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- Announcements
- PCI
- Security Interviews