Tim Thomas • Product Management, ControlScan

Tim Thomas oversees the product management function for ControlScan. Tim is focused on enhancing the company’s product and service deliverables to guide businesses through the complexity of the Payment Card Industry Data Security Standard (PCI DSS) as well as other security and privacy compliance processes.

Prior to joining ControlScan, Tim built and led technical support teams for TeleMate.Net software, a network monitoring and security solutions company, as well as ServiceCentral Software and CipherTrust, an email security and anti-spam software company that is now part of McAfee/Intel. Tim is a member of the PCI Security Standards Council’s SMB Task Force. He tweets at @tethomas_99.

Check out Tim’s articles on the ControlScan Blog.

Chris Bucolo • Director of Market Strategy, ControlScan

Chris Bucolo has over 30 years’ experience in the financial technology and payments industries. In his current role as Director of Market Strategy for ControlScan, Chris is responsible for enhancing the company’s payments industry partnerships by identifying and delivering data security and compliance solutions that maximize the relationship between merchant service providers and their customers. Previously he managed business development for the company’s security consulting and security engineering services.

Chris possesses a wealth of knowledge in payment security best practices and merchant relationships, having built and sold his own Independent Sales Organization (ISO), which was one of the first in the country to embrace Payment Card Industry (PCI) security standards and include related services among its core merchant offerings. He is a regular speaker at payments and security industry events, and his commentary has appeared in several notable publications as well as AP stories and live television interviews.

Check out Chris’s articles on the ControlScan Blog.

Why ASV Whitelisting is Both Normal and Essential for a Successful PCI Vulnerability Scan

October 30, 2017 • Published by Chris Burgess PCI 101ASV, Vulnerability Scanning

“Why am I being asked to whitelist ControlScan’s IP address as part of your ASV service? Doesn’t bypassing my IPS defeat the purpose of a PCI vulnerability scan?” ASV whitelisting is one of the most common questions our Vulnerability Management team receives, so let’s dive … Read more