<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://theclusterofwack.com</loc>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://theclusterofwack.com/privacy</loc>
<changefreq>yearly</changefreq>
<priority>0.2</priority>
</url>
<url>
<loc>https://theclusterofwack.com/authority</loc>
<changefreq>yearly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://theclusterofwack.com/engagement-guidance</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/assessment-source-atlas</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/assessor-skills</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/policy-kit</loc>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/tpsp-boundary</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/search</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/whats-new</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/roadmap</loc>
<changefreq>weekly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/highlights</loc>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/research/attack-surface-after-card-data-leaves</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/about</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/studio</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/w-a-mole</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wml</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wml/lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/reconciliation-lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/applicability-lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/assessment-cutoff-lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/assessment-readiness-explainer</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/claim-trace-lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/gap-handoff-lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/evidence-relationship-lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/chamber</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/campus</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/faculty</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/builders</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/learning-pathways</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practice-rooms</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practice-rooms/founders</loc>
<changefreq>weekly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/diamond-fulcrum</loc>
<changefreq>monthly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://theclusterofwack.com/diamond-fulcrum/derivatives</loc>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/diamond-fulcrum/lab</loc>
<changefreq>monthly</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://theclusterofwack.com/learning-pathways/pilot-lab</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/cluster-of-wack</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/wack-tax</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/wack-gravity</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/wack-radius</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/wack-density</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/wack-propagation</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/inherited-wack</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/wack-by-tpsp</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/schrodingers-scope</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/dashboard-delusion</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/run-a-cluster-mapping-session</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/build-a-defensible-scope-story</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/map-tpsp-responsibility-without-hand-waving</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/turn-a-dashboard-into-an-evidence-chain</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/retire-inherited-wack-safely</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/diagram-drift</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/evidence-archaeology</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/exception-creep</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/scope-by-spreadsheet</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/ownership-fog</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/control-doppelganger</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/sampling-mirage</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/compensating-control-theater</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/evidence-echo</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/na-alchemy</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/run-a-diagram-reconciliation-drill</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/build-an-exception-exit-plan</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/design-a-representative-sample-story</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/challenge-an-na-conclusion</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/trace-evidence-lineage-and-reuse</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/operate-a-scope-continuity-loop</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/disclose-the-whole-public-edge</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/keep-the-acceptance-boundary-visible</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/operate-a-living-guidance-stack</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/treat-every-assessment-result-as-a-claim</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/reduce-telephone-payment-scope-with-twilio-without-outsourcing-the-claim</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/reduce-payment-scope-with-stripe-without-outsourcing-the-claim</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/reduce-card-issuing-scope-with-lithic</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/explain-tpsp-deferral-as-a-testable-claim</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/map-the-infrastructure-deferral-leaves-behind</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/stop-building-grc-tools-that-treat-pci-as-a-second-class-citizen</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/run-a-pci-scorched-earth-assumption-reset</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/operate-the-pci-clock-the-tool-cannot-see</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/build-a-cross-referenceable-pci-operating-model</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/understand-the-operating-commitment-behind-card-acceptance</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/get-your-pci-house-in-order-before-the-year-end-slowdown</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/what-is-a-claims-ledger-and-why-do-you-need-one</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/assess-the-compute-you-never-see</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/what-about-that-entra-id</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-safe-call-and-the-callable-track</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/nothing-happened-is-not-evidence</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/why-do-i-have-to-prove-it-again</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/show-me-the-failed-work</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-grc-platform-has-pci-content-does-it-have-a-pci-product</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/i-missed-my-asv-scan-there-is-guidance-not-a-time-machine</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-pci-scope-is-a-graph-stop-flattening-it</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/do-you-understand-your-penetration-testing-methodology</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-final-report-is-not-your-penetration-testing-methodology</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/do-you-understand-your-pci-dss-v4-policy</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/what-is-your-data-flow-narrative</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/can-i-test-development-instead-of-production</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/read-only-is-a-permission-not-a-scope-conclusion</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-pci-compliant-agent-is-a-system-boundary-not-a-personality</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/does-your-isv-understand-pci-dss-compliance</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/microsoft-patching-is-ridiculously-out-of-hand</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/what-are-the-spokes-of-the-pci-dss-v4-flywheel</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-seven-planes-of-pci-dss</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-tpsp-assurance-packet-is-wrong-now-what</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/expected-observed-documented-asserted-validated</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-crosswalk-is-not-an-assessment</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/evidence-hygiene-is-not-folder-hygiene</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/hidden-points-of-public-presence</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-twilio-pay-webhook-is-a-public-payment-boundary</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-compensating-control-is-not-a-personality-test</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-cryptographic-inventory-is-a-join-not-another-spreadsheet</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/stealth-is-a-business-strategy-not-a-pci-dss-scoping-strategy</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-qsa-does-not-need-the-pitch-deck-they-need-the-assessment-facts</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/we-are-still-in-stealth-is-not-an-architecture-description</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-zero-dollar-revenue-pci-question</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/design-the-payment-boundary-before-product-launch</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-requirement-is-in-the-saq-that-does-not-end-the-applicability-question</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/an-assessment-is-present-tense-a-remediation-plan-is-future-tense</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-good-assessor-finds-gaps-an-assessor-hole-merely-points-at-them</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/you-accept-cards-do-you-understand-what-you-signed-up-for</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-payment-processor-handles-the-transaction-not-every-responsibility</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-five-systems-every-small-merchant-should-be-able-to-name</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-web-developer-may-be-part-of-your-payment-security-story</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-quarterly-scan-you-did-not-know-you-needed</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-guest-wifi-and-payment-network-should-not-be-a-mystery</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-employee-left-did-their-payment-system-access-leave-too</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-vendor-says-they-are-pci-compliant-ask-these-seven-questions</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-annual-pci-questionnaire-is-not-a-memory-test</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-first-hour-after-a-suspected-payment-incident</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/pci-dss-is-not-just-a-checklist-learn-to-tell-the-payment-story</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/what-actually-happens-when-someone-taps-a-card</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/scope-is-a-relationship-problem-not-a-circle-on-a-diagram</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/evidence-is-a-claim-with-receipts</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-provider-is-compliant-your-architecture-still-needs-an-explanation</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-vulnerability-scan-a-penetration-test-and-an-assessment-are-different-jobs</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/cloud-serverless-and-saas-still-have-owners</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/how-to-read-a-pci-dss-requirement-without-memorizing-it</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/build-a-payment-security-portfolio-without-touching-real-card-data</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/how-careers-in-payment-security-actually-branch</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-screenshot-is-not-self-authenticating</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-blue-angels-diamond-fulcrum-of-pci-dss</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/pci-dss-is-not-the-anachronism-your-assessment-machinery-might-be</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-evidence-request-is-a-human-api-with-terrible-latency</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-evidence-avalanche-is-a-data-modeling-failure</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-other-framework-evidence-is-not-automatically-pci-dss-evidence</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-policy-does-not-execute-itself-build-evidence-producing-runbooks</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-cloud-service-changes-the-assessment-question-does-not</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-common-service-assessment-is-a-reusable-baseline-not-a-reusable-conclusion</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/claims-based-assessment-state-the-proposition-before-you-ask-for-the-proof</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-pci-dss-policy-is-not-better-because-it-is-longer</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-negative-claim-needs-a-positive-test-design</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/pci-dss-is-not-your-grc-program-it-lives-inside-it</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-ai-diagram-ends-where-its-permissions-begin</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/an-ai-use-case-is-not-your-assessment-conclusion</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-chatbot-is-not-the-whole-use-case</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-ai-that-recommends-a-change-still-has-an-authority-path</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/ai-generated-code-is-a-development-input-not-a-security-result</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/no-pan-in-the-prompt-does-not-describe-the-whole-data-path</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-ai-threat-model-includes-the-ai-you-use-to-defend-pci-systems</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-ai-should-call-the-cryptographic-service-not-hold-the-key</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/compliance-debt-compounds-quietly-the-assessment-doesnt</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-ai-sre-fixed-the-outage-did-it-change-the-pci-story</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/you-cant-compensate-for-your-customized-approach</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/pay-down-one-pci-compliance-debt-item</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-aoc-anniversary-is-not-an-automatic-re-review-trigger</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/pci-did-not-invent-your-architecture</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-pen-test-report-is-not-your-pci-evidence-package</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-assessment-is-not-the-deadline-for-your-periodic-controls</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-pci-program-owner-needs-authority-not-just-a-calendar</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/a-new-pci-standard-is-not-automatically-a-new-pci-dss-requirement</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-metric-says-100-percent-what-does-that-measure</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/why-would-my-assessor-send-me-this-communication</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/the-change-ticket-closed-did-pci-scope-change-with-it</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/supported-by-the-vendor-is-a-time-bound-claim</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-software-vendor-changed-its-sdlc-would-your-pci-program-notice</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/an-interview-answer-is-a-finding-to-follow-not-a-shortcut-to-the-result</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/remote-observation-is-still-observation-not-screen-share-theater</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/your-grc-dashboard-is-not-an-org-chart</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/being-in-scope-is-not-permission-to-build-a-flat-trust-domain</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/wacktionary/before-the-assessment-starts-12-things-to-get-ready</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/case-files/the-server-that-was-out-of-scope-until-patch-tuesday</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/case-files/the-green-dashboard-and-the-missing-population</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/case-files/the-vendor-aoc-that-answered-the-wrong-question</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/case-files/the-temporary-firewall-rule-that-became-architecture</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/case-files/the-diagram-nobody-wanted-to-update</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/case-files/one-screenshot-ten-controls-zero-owners</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practitioner-notes/the-tuesday-test</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practitioner-notes/start-with-the-asset</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practitioner-notes/an-aoc-does-not-outsource-governance</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practitioner-notes/in-place-is-a-claim</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practitioner-notes/scope-has-a-pulse</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/practitioner-notes/automate-the-mechanics-preserve-the-judgment</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/tell-me-the-version-you-dont-put-in-the-policy</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/what-happens-when-your-favorite-person-leaves</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/what-arent-you-watching</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/when-did-this-become-true</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/how-much-is-this-exception-costing-you</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/what-are-you-afraid-to-unplug</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/is-this-evidence-or-nostalgia</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/what-did-the-sample-hide</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/who-is-allowed-to-say-no</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/did-the-fix-stay-fixed</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/whose-risk-is-this-really</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/pillow-talk/can-your-program-wake-up-without-you</loc>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://theclusterofwack.com/dispatches/living-assessment-ready</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/dispatches/the-virgin-assessed-entity</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/dispatches/token-wise-ai-for-bau-readiness</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/dispatches/pci-at-the-kitchen-line</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/dispatches/infrastructure-that-emits-its-control-story</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://theclusterofwack.com/dispatches/make-the-promise-match-the-proof</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
