David King, CISA, PCI-QSA