PCI DSS 4.0 gap analysis: what the QSA checklist won't find | Vulnox Blog