PCI 4.0 Rants With John Strand | 1-Hour #infosec

/// 🔗 Register for webcasts from BHIS and our other company tribes here -

🔗🛝 Webcast Slides -

PCI 4.0 Rants with John Strand
How it is most likely not going to change your life... Much.

What are the new and exciting changes to the PCI standard? Did they make things better? Because you know that security by committees always makes things better.

Right?

What about testing?

What about passwords? Did they fix that?

Come to this webcast and see.

///Chapters
0:00 First thoughts on PCI
1:02 Focus on security testing
6:00 PCI passwords
19:42 Change #1 wireless
26:12 Change #2 authenticated scans
31:25 Change #3 all vulnerabilities
37:40 Change #4 methodology
45:03 Change #5 multi-tenant service
49:35 Why this matters: Forensics
55:34 Why this matters: One standard away
58:24 Pay what you can training + Q&A

[onemartinway]

This was awesome. I'm so mad I missed this live. Love the reference to the council of Rick's.

[jeeeef]

Buddy likes to hear himself talk. Could have just explained what a bod was

[jeeeef]

Very good video once we move past that first item. I criticize because I care

[xCheddarBbx]

strings below 14 characters were considered computationally risky in ~2019 when I first started learning security stuff
in 2022, they picked 12
lol wut

[BulldogMcC]

Watching the intro I realized I need Wild West Squares, like the old Hollywood Squares Game.