4 ms·
The problem I had with PCI DSS is that you could check the boxes and if you are never audited, you don't actually have to fix those problems. I worked for a pla
by CaptSpify 10y ago
The problem I had with PCI DSS is that you could check the boxes and if you are never audited, you don't actually have to fix those problems. I worked for a place that ran that way for ~3 years.
- kbenson 10y agoYeah, it is a sort of honor system, but I'm sure if you were hacked, and they see you aren't compliant, it won't go well for you. The fines get steep fairly quick[1][2]. Considering it mentions you might be charged $50-$90 per card even if you are compliant. Although I think those are actually fees for the issuers, I can't imagine they don't have a way to pass then along to merchants. 1: http://www.focusonpci.com/site/index.php/pci-101/pci-noncompliant-consequences.html http://www.focusonpci.com/site/index.php/pci-101/pci-noncomp... 2: https://www.pcicomplianceguide.org/pci-faqs-2/#15 https://www.pcicomplianceguide.org/pci-faqs-2/#15