7 ms·
Most annoying instance I've experienced with PCI compliance was with an auditor who didn't understand the concept of patching. Even after providing the full li
by OSButler 11y ago
Most annoying instance I've experienced with PCI compliance was with an auditor who didn't understand the concept of patching.
Even after providing the full list of backported CVEs, which clearly showed the one he insisted was missing on the system, he still refused to pass it.
Only after escalating the issue was it finally marked as passed.
- vidarh 11y agoI've had that too - the only thing the auditor in question cared about was the version number that their run of nmap had guessed.