Free live webinar · PCI DSS
What QSAs Are Really Findingin PCI DSS Assessments
Join industry experts from 2-sec and RiverSafe as they discuss the most common findings emerging from real PCI DSS assessments.
About this session
Drawing on experience from assessments across a range of organisations, we'll explore recurring issues, misunderstood requirements, evidence gaps, and the practical steps organisations can take to improve assessment readiness.
45 minutes, mapped out
What you'll learn
Five tight segments that move you from "where do we start" to practical actions you can take before your next assessment.
The most common findings QSAs are identifying
We don't read you a list. We walk through the recurring issues that come up again and again in real assessments , and why they keep appearing.
The backbone of the session →
Where organisations are struggling with PCI DSS 4.0
The requirements that most often trip teams up in practice, and what to do about them.
Scope and documentation mistakes that create delays
How scoping and evidence slips turn a straightforward assessment into a drawn-out one.
Common evidence and control gaps
The gaps QSAs see most often in evidence packs and control implementations — and how to close them before your assessor finds them.
Practical actions to prepare for your next assessment
You leave with concrete steps to improve assessment readiness, ready to turn into a board-facing plan.
Your speakers
Join 2-sec and RiverSafe as they explore the most common findings from real-world PCI DSS assessments and discuss the practical challenges organisations face when working towards compliance
Hosted by 2-sec's PCI DSS experts and RiverSafe security consultants, with practical insights from both assessors and practitioners.
Tim Holman
CEO & Founder, 2-sec
Tim is CEO and Founder of 2-sec. Having led assessments across public sector, financial services and enterprise environments, Tim has seen first-hand that many successful compromises do not occur because organisations fail to identify critical assets, they occur because organisations underestimate the importance of everything else.
His work focuses on identifying the blind spots that exist between vulnerability management, security monitoring, architecture and operational reality, helping organisations understand how attackers actually move through modern environments rather than how defenders expect them to.
Ilyass Aouad
Principal Security Consultant, RiverSafe
Ilyass is a highly experienced multi-lingual cyber expert with several years of experience working across very large, complex environments including banks, oil and gas companies and software providers.
Ilyass is very customer-focused and prides himself on delivering exceptional customer service.
Who should attend?
If PCI DSS lands on your desk in any form, this session is built for you, no prior QSA experience needed.
- PCI Compliance Managers
- Information Security Managers
- IT & Infrastructure Managers
- Governance, Risk & Compliance Teams
- Merchants and Service Providers subject to PCI DSS
Key takeaway
Know what QSAs see before they see it.
Forty-five minutes with two practitioners who sit across the table from these findings every week, condensed into the patterns, the pitfalls, and the preparation.
Leave with a better understanding of the issues QSAs are seeing in real assessments, and practical advice to help your organisation avoid the same pitfalls.
Limited capacity
Seats are limited, we cap the room so Q&A stays useful.
Wednesday 19 November · 11:00 GMT
Save my seat, it's freeCan't make it live? Register anyway and we'll send you the recording.