PCI DSS Scoping

In this episode of InfoSec Insider, Tibor Laczko and Alastair Stewart, both Senior Consultants and Qualified Security Assessors (QSAs) at URM, explore scoping in the Payment Card Industry Data Security Standard (PCI DSS). Alastair and Tibor leverage nearly 30 years’ combined experience with the PCI DSS to discuss:    

When an organisation stops being ‘just a merchant’ and becomes a PCI DSS service provider and how this distinction is made
Whether organisations can be a merchant and service provider at the same time and how this should be reflected in the PCI DSS assessment
Why Requirement…