PCI DSS reporting details to ensure when contracting quarterly CDE tests

This is the second blog in the series focused on PCI DSS, written by an AT&T Cybersecurity consultant. See the first blog relating to IAM and PCI DSS here.

There are several issues implied in the PCI DSS Standard and its associated Report on Compliance which are rarely addressed in practice. This occurs frequently on penetration and vulnerability test reports that I’ve had to assess.

First off is a methodology which matches the written policies and procedures of …

amp assessment blog compliance consultant cybersecurity dss iam pci penetration policies policies and procedures practice procedures report reporting reports series standard test tests vulnerability