3 ms·
If you don't store credit card information locally, then it's pretty easy to be PCI-compliant. Just make sure everything's secured and only a few people have ac
by danudey 16y ago
If you don't store credit card information locally, then it's pretty easy to be PCI-compliant. Just make sure everything's secured and only a few people have access, pay for security sweeps, and you're good.
If you're storing credit card numbers, things get much more complicated.
- andrewf 16y ago"Not storing" is a better situation than "not handling" but it doesn't get you off the hook.
- modoc 16y agoIf you don't store it you get to skip Req 3 basically. You still have most of the other 11 Requirements to worry about... Multi-key strong encryption and key rotation isn't that hard... The policies, documentation, and other areas are harder imho.