PCI Community Roundtable

Expert Guidance from Renowned QSAs on the new eSkimming Requirements and other changes in PCI DSS 4.0 

June 13th 2024 

2:00 - 3:00 PM EST

Register now

Join some of the most experienced and recognized members of the global QSA community for expert guidance, an in-depth conversation, and an "ask me anything" style community meeting focused on the new eSkimming requirements and other significant changes in PCI DSS 4.0

The summer is already upon us, and far too many merchants are just now getting started on the mountain of work they need to do to comply with PCI DSS 4.0. What might seem like a date far on the horizon, March 2025 is just around the corner.

Too many questions linger, too many misconceptions exist, and far too many days have already passed. You need to be armed with the right playbook to ensure success - and you need to get moving right away. 

Join us on Thursday, June 13th at 2pm ET and hear from Richard Haag (Intersec Worldwide), Jeffrey Man (Online Business Systems), Robert Davidson (AT&T Cybersecurity), Kyle Hinterberg (LBMC), Sully Perella (Schellman) and Matt McGuirk (Source Defense) as they discuss: 
  • Scope - removing any uncertainty and providing you with a clear understanding of exactly what the new requirements for eSkimming security mean, what you have to do and what parts of your online checkout process they cover
      
  • Approaches - analyzing different methods your organization might use for addressing these new requirements, the pros and cons of each and giving you guidance on the easiest pathway for compliance 

  • Expectations - giving you a QSAs view into what you'll be expected to have in place before your next RoC or SAQ, and an understanding of the documentation and ongoing processes you'll need to follow to stay compliant come March 2025

  • Misconceptions - eliminating common misunderstandings and misinformation currently floating around the community related to these new eSkimming security requirements and other changes in PCI DSS 4.0.

    Hints - no, you can't wait until 2026 just because you did your last RoC in March. No, you can't completely offload the requirements under 6.4.3 and 11.6.1 to your eCommerce provider. No, you can't wait to address the issue until you start your next RoC or SAQ. 

  • Roles and Responsibilities - shedding light on the responsibilities for eSkimming security shared by all players in the eCommerce ecosystem - what do you as a merchant need to do? What do eCommerce platform providers need to do? What do Payment Service Providers need to do? We'll answer it all.