Doing PCI Right: Has your Scope Changed?


Incorporating the New Scoping Guidance

Doing PCI Right: Has your Scope Changed?

The PCI Security Standards Council (PCI SSC) issued new scoping guidance at the end of 2016. This change will alter the scope of many organizations’ PCI DSS assessment and likely create new gaps in future compliance and define scoping for the future.

For example, the new guidance identifies several types of systems that many organizations commonly believe to be out of scope, but which are now clearly defined as in scope.

In this educational webinar you will learn:

  • The fundamentals of the new guidance for scoping and segmentation
  • How it impacts your future PCI DSS compliance
  • 7 dangerous scoping mistakes and ways to solve them
  • Strategies to help you prepare for your next assessment and maintain compliance

This is the most comprehensive guidance published by the Council to date. It likely will have significant implications on budget, schedule, and resource requirements. Organizations can avoid frustration, delays and cost overruns through education, preparation, and actions to limit runaway scope.

Join Sam Pfanstiel, Director of Solution Architecture for Payments and Retail, as he provides you with specific recommendations to help you reduce the scope of your next PCI assessment under these new rules.

This archived webinar requires registration. Please fill out the form to receive access.

Sam-Pfanstiel.pngSam Pfanstiel has two decades of information technology management, e-commerce, mobile payments, and security experience. As the Director of Solution Architecture at Coalfire, he is responsible for translating requirements created by IT risk and compliance mandates into business-centric cyber solutions strategies. His experience covers a broad spectrum of disciplines including payment security, PCI compliance, fraud, application security, mobile security, IT infrastructure, secure software development, point-to-point encryption, and card brand compliance.