3 ms·

Obligatory: https://www.rsync.net/resources/regulatory/pci.html https://www.rsync.net/resources/regulatory/pci.html

• waihtis 6y ago
  Absolutely love it!
• acomjean 6y ago
  PCI compliance helps a little. When I was doing IOT power/temperature monitoring sometimes companies wanted us to show PCI compliance before attaching our hardware to their networks. (we weren't) which meant we had to explain to them to put us on a separate network, without credit card processing devices.
  • krallja 6y ago
    PCI compliance is extremely easy if you don’t handle PANs. Provide a SAQ that says “we don’t handle PANs” and you’re compliant.
    • czbond 6y ago
      Caveat if you are small business. Otherwise, with lots of charges it costs about $100k+ annually in validation, not including labor effort. A startup can hit this quickly, but only under certain circumstances.
      • mahmoudimus 6y ago
        If you're a startup and you need PCI DSS compliance, please contact me - mahmoud [@] verygoodsecurity.com and I'd love to help!
• jcims 6y ago
  Definitely agree from a technical perspective. But I do think it was marginally successful in translating technical risk to business risk, which is something that hadn't been done very well previously and did drive a lot of investment into 'security'. Unfortunately the security industry somewhat predictably responded with snake oil and bullshit that were predictably countered with overpriced Big N assessments, but that's another story.