PCI DSS network segmentation: scope, drift, and the evidence gaps QSAs miss | Vulnox Blog