Search a title or topic

Over 20 million podcasts, powered by 

Player FM logo
Artwork

Content provided by Hacker Valley Media. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Hacker Valley Media or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Player FM - Podcast App
Go offline with the Player FM app!

Compliance Isn’t the Enemy with Jeff Man

24:54
 
Share
 

Manage episode 496246973 series 2675076
Content provided by Hacker Valley Media. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Hacker Valley Media or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Is compliance just a checkbox, or the backbone of real security?

Returning to the show with decades of hard-earned insight, Jeff Man makes the case that compliance, especially PCI-DSS, isn't just a formality; it's foundational to modern security. As one of the original architects of the NSA Red Team and a 20-year PCI veteran, Jeff explains how this often-misunderstood framework has shaped everything from pen testing to vendor accountability.

Ron and Jeff unpack the six core goals of PCI, how red teams and SaaS builders are directly affected, and why many security teams resist compliance efforts, despite relying on them to get essential buy-in and funding.

Impactful Moments:

00:00 – Introduction
01:00 – Does compliance equal security?
02:09 – Jeff returns with PCI firepower
03:15 – Defining security vs. compliance
05:33 – “Show me what you’re doing”
06:45 – Six goals at PCI’s core
10:45 – Security is watching, not reacting
13:30 – Companies secure because they have to
15:00 – PCI gave red teams their jobs
16:30 – Stripe and Square absorb PCI burden
19:30 – PCI 4.0 causes confusion
21:00 – Vendors aren’t your trusted advisors
22:30 – “Hate me, but I’ll help”

Links:

Connect with our guest, Jeff Man: https://www.linkedin.com/in/jeffreyeman/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

  continue reading

387 episodes

Artwork
iconShare
 
Manage episode 496246973 series 2675076
Content provided by Hacker Valley Media. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Hacker Valley Media or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Is compliance just a checkbox, or the backbone of real security?

Returning to the show with decades of hard-earned insight, Jeff Man makes the case that compliance, especially PCI-DSS, isn't just a formality; it's foundational to modern security. As one of the original architects of the NSA Red Team and a 20-year PCI veteran, Jeff explains how this often-misunderstood framework has shaped everything from pen testing to vendor accountability.

Ron and Jeff unpack the six core goals of PCI, how red teams and SaaS builders are directly affected, and why many security teams resist compliance efforts, despite relying on them to get essential buy-in and funding.

Impactful Moments:

00:00 – Introduction
01:00 – Does compliance equal security?
02:09 – Jeff returns with PCI firepower
03:15 – Defining security vs. compliance
05:33 – “Show me what you’re doing”
06:45 – Six goals at PCI’s core
10:45 – Security is watching, not reacting
13:30 – Companies secure because they have to
15:00 – PCI gave red teams their jobs
16:30 – Stripe and Square absorb PCI burden
19:30 – PCI 4.0 causes confusion
21:00 – Vendors aren’t your trusted advisors
22:30 – “Hate me, but I’ll help”

Links:

Connect with our guest, Jeff Man: https://www.linkedin.com/in/jeffreyeman/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

  continue reading

387 episodes

सभी एपिसोड

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright
Listen to this show while you explore
Play