Watch Questions with the Council: PCI DSS v4.0 and the Customized Approach

In
the
second
installment
of
the


“Questions
with
the
Council”
video
series,
Data
Security
Standards
Manager,
Kandyce
Young,
answers
the
payment
industry’s
questions
about
PCI
DSS
v4.0.
The
questions
focus
specifically
on
the
customized
approach
and
compensating
controls.
Questions
include:

• Is
  the
  customized
  approach
  right
  for
  our
  organization?
   
• What
  is
  a
  situation
  where
  a
  compensating
  control
  should
  be
  used,
  versus
  the
  customized
  approach?
   
• What
  is
  a
  “legitimate
  documented
  technical
  or
  business
  constraint”
  when
  implementing
  a
  compensating
  control?
• Can
  the
  same
  QSA
  design
  and
  asses
  a
  customized
  control?
   

Watch
“Questions
with
the
Council”
where
Kandyce
answers
these
questions
and
more!
Make
sure
to


subscribe
to
the
Council’s
YouTube
page
to
stay
up
to
date
with
upcoming
payment
security
videos. 

 
Have
more
questions
about
the
customized
approach
or
compensating
controls?
Make
sure
to
read
this
blog
series
for
more
information:

Make
sure
to
check
out
the
whole


“Questions
with
the
Council”
series! 

Want
more
resources
on
PCI
DSS
v4.0?
 Visit
the
PCI
DSS
v4.0
Resource
Hub:

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts