3 ms·

How about PCI-DSS (as a counterpoint)?

• tptacek 16y ago
  There's plusses and minuses to PCI. On the plus side, it has absolutely increased awareness of web security at commerce companies, and further it has pushed people from trying to do their own credit card handling to outsourcing that function to companies that can keep on top of it. On the minus side, it's spawned a small industry of checkbox consultants who do companies a disservice by allowing them to believe they've been audited and assured when really nothing of the sort has happened. It's not hard to trace public incidents back to the PCI auditors who OK'd those companies.