"Not a certified PCI report."
Using the Qualys engine for PCI ASV scanning? You might want to check their status with the SSC as they apparently cannot provide official ASV scans right now!! #qualys-you-had-ONE-job!
@pacohope And where do you suggest organisations start? Spend a fortune up front or have someone provide a list of the right questions to ask to take the first steps? How would you even know you’re the right person/organisation to help; AFTER they’ve signed your contract?
@browninfosecguy Yes and no. I have no passion whatsoever for InfoSec per se, I enjoy fixing what’s broken and helping. Few people find their passion in life, that’s no reason for not doing what you’re good at.