This presentation explains why PCI requirement 11.6.1 was added in PCI 4.0. We will discuss changes made to the SAQ A, including why scanning was added and how it makes you more secure. We will use case studies from Shopping Cart Inspect to illustrate the threats these changes to the PCI standard are trying to resolve. Lastly, we will discuss solutions to PCI 11.6.1 as well as the SAQ A and introduce a timeline for acquirers and merchants to follow so that they can begin their compliance plan.