Episodes

  • LBMC Went to PCI Community Meeting - Here's What Everyone's Talking About
    Oct 31 2025

    What's everyone still talking about from the 2025 PCI Community Meeting?

    In this episode of Cybersecurity Sense, LBMC's PCI QSA team take you behind the scenes of one of the industry's most talked-about events sharing expert insights on vendor risk, AI's role in compliance, and what your org should be thinking about now.

    Don't miss practical tips, key takeaways, and what's coming in 2026.

    📌 Download our PCI 4.0 Maintenance Checklist: https://www.lbmc.com/wp-content/uploads/2025/10/PCI-4-0-Recurring-Task-Checklist.pdf

    📌 Download our Six Questions to Take Charge of Your TPSPs card: https://www.lbmc.com/wp-content/uploads/2025/10/Six-Questions-to-Take-Charge-of-Your-TPSPs.pdf

    Show More Show Less
    33 mins
  • Guard Duty: A Conversation on Cyber Defense and Digital Resilience
    Oct 16 2025

    LBMC's Mark Burnette and Bill Dean talk about some of the most common technical security issues that are discovered in penetration testing, as well as some tactics for improving cyber defenses.

    Show More Show Less
    27 mins
  • Can You Trust Your Eyes? Deepfakes, Self-Healing Systems, and AI Risks You're Not Seeing
    Jun 5 2025

    In this episode of Cybersecurity Sense, host Mark Burnette sits down with Andy Kerr and Kyle Hinterberg for a sharp, insightful look at the real-world impacts of artificial intelligence on cybersecurity.

    From the alarming rise in deepfake attacks to the evolving landscape of PCI compliance, the trio dives into the current hot topics keeping cybersecurity leaders up at night. Highlights include:

    • How deepfakes are undermining identity verification and fueling advanced phishing schemes
    • The growing compliance demands of PCI 4.0, especially around payment page scripts
    • The rise of self-healing networks and the AI dashboards driving autonomous remediation
    • Why asset inventory, aka "the other AI," still trips up even mature organizations
    • How AI can both solve and create new challenges in identifying rogue devices and shadow IT

    Whether you're defending against advanced threats or just trying to understand how AI is transforming compliance, this episode delivers practical insights and expert perspectives straight from the field.

    Questions? We're here to help. Reach out to our team directly!

    Show More Show Less
    28 mins
  • The Future of AI Security: Legacy AI, Emerging Risks & Business Impact
    Mar 18 2025

    Cybersecurity is evolving, and so is our podcast! 🎙️ New hosts Andy Kerr and Kyle Hinterberg discuss their backgrounds and the a new, broader focus for the podcast—expanding beyond PCI compliance to cover real-world cybersecurity trends.

    In this episode, you'll learn about the evolution of security challenges and the growing impact of AI in cybersecurity.

    Key topics include:

    • DeepSeek vs. OpenAI – A new AI model shaking up the industry
    • AI Risks & Compliance – Guardrails, security gaps, and legal concerns
    • Practical Business Impact – How organizations should approach AI securely

    Tune in for insights on staying ahead in an AI-driven security landscape! 🎧

    Questions? We're here to help. Reach out to our team directly!

    Show More Show Less
    39 mins
  • PCI Monthly Update: Latest News and Updates to Requirement 12
    May 21 2024

    Join us for the latest episode of our PCI Monthly Update podcast, where we explore the latest developments in the world of payment card industry security.

    We begin with a news segment covering the impact of PCI v4.0 and how organizations are adjusting. In case you missed it - Andy Kerr joined PCI Practice Partner Stewart Fey for an interactive Q&A session on PCI 4.0. If you're interested in watching this session, reach out to our team for a link.

    Next up, we'll cover the last requirement - Requirement 12 - the "Information Security Catch-All Requirement." This requirement covers all security functions including policies, security awareness, incident response, etc. Our QSA experts provide their insights on what's changed with v4.0 and share some experiences in the field.

    This episode is a must-listen for professionals seeking to stay informed and improve their organization's payment security and compliance.

    Show More Show Less
    40 mins
  • PCI Monthly Update: Latest PCI News, Requirement 11 Overview, and QSA Insights
    Apr 30 2024

    Join us for the latest episode of our PCI Monthly Update podcast, where we explore the latest developments in the world of payment card industry security.

    We begin with a news segment covering the launch of PCI v4.0 and the ins and outs of the new INFI (Items Noted For Improvement) Worksheet.

    Next up, we'll cover Requirement 11 - Test security of systems and networks regularly. This requirement can either be the easiest or hardest for organizations depending on their setup. Our QSA experts provide their insights on best practices and what has changed in v4.0.

    This episode is a must-listen for professionals seeking to stay informed and improve their organization's payment security and compliance.

    Show More Show Less
    34 mins
  • PCI Monthly Update: Version 4.0 Countdown, Requirement 10, and QSA Insights
    Mar 19 2024

    In this edition of the PCI Monthly Update, we're counting down to the launch of PCI 4.0! We start this month's podcast with a reminder that v4.0 goes into full effect on March 31.

    Our focus then shifts to Requirement 10 covering logging and monitoring all access to system components and card holder data and what is changing with v4.0.

    This podcast is your monthly briefing on PCI standards - an indispensable listen for anyone tasked with safeguarding payment card data.

    Show More Show Less
    28 mins
  • PCI Monthly Update: Gearing Up for Version 4.0, Mastering Requirement 9, and QSA Insights
    Jan 30 2024

    In this January edition of the PCI Monthly Update, we're on the brink of exciting changes with version 4.0 just around the corner! We start with a spotlight on the ongoing Request for Comments (RFC) period for PCI DSS v4.0, inviting insights from industry experts. Plus, we discuss the Global Content Library, showcasing insights from the 2023 Community Meetings.

    Our focus then shifts to Requirement 9, where we break down the critical protocols for restricting physical access to cardholder data. We'll cover everything from documenting security policies to managing visitor access, ensuring secure storage and destruction of media with cardholder data, and protecting Point of Interaction (POI) devices from security threats.

    Wrap up with us as we consolidate today's takeaways and prepare you for what these updates mean for your compliance strategy.

    This podcast is your monthly briefing on PCI standards - an indispensable listen for anyone tasked with safeguarding payment card data.

    Show More Show Less
    30 mins