Beyond the Vendor: Managing Fourth, Fifth, and Nth-Party Risks in PCI Environments

Presented by: Brian Willis, PCI QSA, CISSP, ISO 27001 LA, Partner, LBMC, PC and Kyle Hinterberg, Sr. Manager, LBMC, PC A compliant third party doesn’t mean a secure ecosystem. As supply chains expand, so do the risks—often beyond direct vendor relationships. This session dives into managing security threats from fourth, fifth, and even Nth-party providers in PCI DSS-regulated environments. We’ll discuss mapping critical dependencies, implementing contractual protections, and ensuring continuous security oversight across complex vendor ecosystems. Attendees will gain actionable strategies to build resilience beyond direct third-party relationships, aligning security expectations with PCI DSS compliance. Subscribe to the PCI Perspectives Blog to receive all of the latest PCI DSS v4.0 and Council News: https://training.pcisecuritystandards... SUBSCRIBE to our channel! Follow PCI SCC on X: https://x.com/PCISSC Follow PCI SSC on LinkedIn:   / pcissc   PCI SSC Blog: https://blog.pcisecuritystandards.org/ PCI SSC Events: https://events.pcisecuritystandards.org/