PCI DSS 4.0.1 and data in motion
Two PCI DSS requirements are data loss problems in disguise. Both assume you can find card data and control how it moves.
Blog
Notes on data and AI security
Practical articles on data, AI and audits.
Evidence an auditor can trust
When an auditor asks what happened, "we think" is not an answer. A useful record explains itself and cannot be quietly changed.