Pentest retest: what it is, why auditors expect it and how often to test
A retest proves the fix worked. Learn what it is, what the report must show, the most common fixing mistakes and how often to pentest.
Blog · Pentest Machine
A retest proves the fix worked. Learn what it is, what the report must show, the most common fixing mistakes and how often to pentest.
PCI DSS 4.0.1 Requirement 11.4 has several sub-requirements and your QSA checks each one. CDE scoping, internal and external testing, segmentation, retesting and tester independence.
Buying a pentest "for compliance" and failing the audit anyway is more common than it looks. What changed in PCI DSS 4.0 and what a report…