Lightning Talk: PCI DSS and
summary
Level 1 compliance is assessed by a QSA, audits take months, include a week‑long on‑site, cost upwards of $50,000 and demand hundreds of team hours; evidence collection yields an AOC and an RFC that reveal the full cardholder data architecture. Spreedly offers PCI scope reduction as a paid service, builds PCI into every app, runs year‑long audits and stores evidence in Dropbox Paper, and reports reducing the burden for over 450 companies.
AI-written summary · about
chapters (7)
- 0:00Intro
- 1:32Level 1 Compliance
- 2:34Level 3 Compliance
- 3:32Take PCI Seriously
- 4:30Documentation
- 5:18Be Nice
- 5:54Outro
related talks
05mAchieving PCI Compliance On a Single Foundation
28mKeeping the Bank Happy: PCI DSS v4
40mThrough the Zoom Dimly: A Year of Remote Audits
34mPCI and Politics
48mPCI DSS 4.0: Evolution, Revolution, or an Omen of Extinction?
40mUsing Threat Modeling to Improve Compliance
31mReverse Engineering Compliance
24mPCI Compliance using Cloud Foundry and BOSH Add-ons