vendor updates a script Privacy Security PCI DSS Vendor Risk One change. Four control domains. No one team saw it all. feroot