For scope definition and a baseline of the cardholder data in an environment, Enterprise Recon is the first tool I advocate when initiating any large PCI assessment. I’ve found that Enterprise Recon enables consultants and those being assessed to focus their efforts on specific areas, which proves valuable in a large, complex environments. In my experience, large organisations possess huge amounts of unnecessary data which increases their risk of exposure and Enterprise Recon goes a long way to identifying data so that it can be appropriately secured, relocated or removed from the environment in question.

Roger Greyling
Qualified Security Assessor
QSA

Card Recon
Data Recon
Enterprise Recon