565
reputation
2
7

withoutfire

I work for one of the major card brands in the Industry Standards team, helping to develop security standards and helping people to understand them. Any answers or contributions I post on StackExchange are my own personal opinion, they are not the view of the card brand and in the case of PCI-related questions you should (of course) ask your QSA or acquiring bank.

Previously I used to work for a different card brand and was their representative on the PCI Security Standards Council, so I contributed to the development of a number of PCI standards including PCI DSS, PCI PA DSS and P2PE. I was also responsible for PCI compliance programmes in Europe - so I've a detailed knowledge of who needs to comply with PCI DSS and how they need to demonstrate that. When I've not been writing security standards, I've been a security consultant, a QSA and I've worked with lots of large merchants in Europe, helping them comply with payment security standards.

I hold professional certifications in information security and privacy and have an LLM in Information Rights Law.

In my spare time I write PCI training courses for Pluralsight.

32
answers
0
questions
~14k
people reached

Top network posts

We respect a laser-like focus on one topic.

Top tags (27)

Score 40
Posts 32
Posts % 100
Score 8
Posts 8
Score 6
Posts 3
Score 6
Posts 2
Score 5
Posts 4
Score 3
Posts 2

Top posts (32)

View all questions and answers

Badges (9)

Gold

Silver

2

Rarest

Bronze

7

Rarest