Any way to access the podcast for those of us who don’t do itunes?

I downloaded both from iTunes this am. Very good stuff and fine audio quality. I was thinking you could make the Compensating Control one longer…then again, as a consultant, maybe I’d prefer you make it shorter…

For those that don’t have access to iTunes, the PodCasts can also be found at http://www.aegenis.libsyn.com/.

Good stuff!

I have one question about the retail store example. If we are upgrading our POS SW (which is not compliant), and our C-level signs that we have ongoing process, estimate time for compliance is 2009, is it suitable compensating controls itself, or do we need to put some other controls in place too? So basically, if we sign that document, our QSA have to accept it even if we are e.g. storing plaintext PAN etc, but we took that risk?

[...] information about the blog, forum, and the Society of Payment Security Professionals (SPSP), our Podcasts, and much [...]

After doing a research for fulfilling the second PCI 6.6 Compliant standard.
We found a few great products to recommend:
1. dotDefender - for IIS,Apache and ISA server.
2. GetProtect - ISA only.
We checked both of the products and found them suite for our needs.
We currently run 45 servers (45 cpu’s).
Good luck with the PCI standard.
Dani.