4 ms·
Online retailers who handle their own CC processing tend to keep credit card information around if only for fraud/chargeback tracking in the future - being onli
by dedward 15y ago
Online retailers who handle their own CC processing tend to keep credit card information around if only for fraud/chargeback tracking in the future - being online opens you up to massive abuse if you don't keep it in check.
A big player like sony should have been complying with PCI standards - but from what I've seen, that's not so difficult to pass and then forget about - people take shortcuts - and how many companies out there have ever had their processing revoked for NOT complying with PCI? That would be an interesting statistic.
- falcolas 15y agoFrom my experience, PCI compliance does not require that you have everything perfect, as long as you have a plan to fix your deficiencies. And as an employee at a couple of PCI compliant shops, I can attest that even full PCI compliance still leaves a lot of holes (enough that some organizations have formed their own compliance exams above and beyond PCI).