Compliance Isn’t the Enemy with Jeff Man

Compliance Isn’t the Enemy with Jeff Man

Is compliance just a checkbox, or the backbone of real security?

Returning to the show with decades of hard-earned insight, Jeff Man makes the case that compliance, especially PCI-DSS, isn't just a formality; it's foundational to modern security. As one of the original architects of the NSA Red Team and a 20-year PCI veteran, Jeff explains how this often-misunderstood framework has shaped everything from pen testing to vendor accountability.

Ron and Jeff unpack the six core goals of PCI, how red teams and SaaS builders are directly affected, and why many security teams resist compliance efforts, despite relying on them to get essential buy-in and funding.

Impactful Moments:

00:00 – Introduction 01:00 – Does compliance equal security? 02:09 – Jeff returns with PCI firepower 03:15 – Defining security vs. compliance 05:33 – “Show me what you’re doing” 06:45 – Six goals at PCI’s core 10:45 – Security is watching, not reacting 13:30 – Companies secure because they have to 15:00 – PCI gave red teams their jobs 16:30 – Stripe and Square absorb PCI burden 19:30 – PCI 4.0 causes confusion 21:00 – Vendors aren’t your trusted advisors 22:30 – “Hate me, but I’ll help”

Links:

Connect with our guest, Jeff Man: https://www.linkedin.com/in/jeffreyeman/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Avsnitt(390)

Episode 70 - Finding the Genius Within with Laura Garnett

Episode 70 - Finding the Genius Within with Laura Garnett

In this episode we have the powerful Laura Garnett. She is a performance strategist and the author of the best-selling book "The Genius Habit." She has built her career on finding the genius in others and has an insightful take on passion versus purpose.   Laura's Website: http://www.lauragarnett.com/

31 Maj 202029min

Episode 69 - Paving a Path with Georgia Weidman

Episode 69 - Paving a Path with Georgia Weidman

In this episode, we have the powerful Georgia Weidman. She is a serial entrepreneur, penetration tester, security researcher, speaker, and author with an incredible backstory.   Georgia's LinkedIn: https://www.linkedin.com/in/georgiaweidman/ Georgia's Youtube: https://www.youtube.com/channel/UCNKUSu4TPk979JzMeKDXiwQ/featured Georgia's Company Website: https://www.shevirah.com/

28 Maj 202030min

Episode 68 - Behavioral Economics and Cybersecurity with Kelly Shortridge

Episode 68 - Behavioral Economics and Cybersecurity with Kelly Shortridge

In this episode of the Hacker Valley Studio podcast, we have the brilliant Kelly Shortridge sharing her thoughts on behavioral economics and cybersecurity. She also has a lesson or two for vendors in the cybersecurity space. Kelly's Websites: https://kellyshortridge.com/ and https://swagitda.com/

26 Maj 202038min

Episode 67 - Doubling Down on Humans with Caroline Wong

Episode 67 - Doubling Down on Humans with Caroline Wong

In this episode we have author, speaker, podcaster, and expert Caroline Wong in the studio. We get to learn more about her and her fascination with people.   Caroline's LinkedIn: https://www.linkedin.com/in/carolinewmwong/ Caroline's Twitter: https://twitter.com/CarolineWMWong Caroline's Podcast: https://twitter.com/humansofinfosec

19 Maj 202032min

Episode 66 - Serial Advocacy with Chloé Messdaghi

Episode 66 - Serial Advocacy with Chloé Messdaghi

In this episode we have the powerful serial advocate, Chloé Messdaghi. We discuss hackers rights, women in security, several of her other passions. Chloé's Twitter: https://twitter.com/ChloeMessdaghi Chloé's LinkedIn: https://www.linkedin.com/in/messdaghi/ The Hacker's Rights Petition: https://www.change.org/p/organizations-support-ethical-hackers

17 Maj 202035min

Episode 65 - Chatting with John Kindervag the Godfather of Zero Trust

Episode 65 - Chatting with John Kindervag the Godfather of Zero Trust

John Kindervag is a household name in cybersecurity and he is the creator of the Zero Trust networking model. John is a brilliant thought-leader and we think you will agree with us after this episode.   John's LinkedIn: https://www.linkedin.com/in/john-kindervag-40572b1/ John's Twitter: https://twitter.com/Kindervag

14 Maj 202024min

Episode 64 - Becoming a Networking Machine with Jordan Harbinger

Episode 64 - Becoming a Networking Machine with Jordan Harbinger

We are extremely excited to bring you the master of networking himself, Jordan Harbinger. Jordan Harbinger is the mastermind behind the Jordan Harbinger Show that brings in over 6 million downloads per month! In this episode we discuss networking, learning tough subjects, the art of conversation and more.   Jordan's Website: https://www.jordanharbinger.com/ His 6 Minute Networking Course: https://www.jordanharbinger.com/courses/ His Twitter: @JordanHarbinger His LinkedIn: https://www.linkedin.com/in/jordanharbinger/

10 Maj 202033min

Episode 63 - Head in the Clouds with Francesco Cipollone

Episode 63 - Head in the Clouds with Francesco Cipollone

In this episode we have the exciting Francesco Cipollone. We talk about his long history with cloud technologies and how he is sharing his knowledge with the community.   Frank's LinkedIn: https://www.linkedin.com/in/fracipo/ Frank's Twitter: @FrankSEC42 Frank's Website: https://www.nsc42.co.uk/

6 Maj 202035min

Populärt inom Utbildning

bygga-at-idioter
historiepodden-se
det-skaver
rss-bara-en-till-om-missbruk-medberoende-2
alska-oss
nu-blir-det-historia
svd-ledarredaktionen
harrisons-dramatiska-historia
allt-du-velat-veta
johannes-hansen-podcast
roda-vita-rosen
rikatillsammans-om-privatekonomi-rikedom-i-livet
not-fanny-anymore
rss-max-tant-med-max-villman
sektledare
sa-in-i-sjalen
i-vantan-pa-katastrofen
rss-sjalsligt-avkladd
jagaren
rss-npf-podden