false inference. pci dss is largely about internal process, not visible to the outside. passing a security scan doesn't mean you're pci dss compliant. of the 1

false inference. pci dss is largely about internal process, not visible to the outside. passing a security scan doesn't mean you're pci dss compliant. of the 12 requirements of pci dss, only 1 is even partially met by successfully passing an external scan.