4 ms·
AFAIK, if you're not doing loads (well into six figures) of transactions, you don't need to get external auditors in. But there's a lot of work in figuring out
by andrewf 18y ago
AFAIK, if you're not doing loads (well into six figures) of transactions, you don't need to get external auditors in. But there's a lot of work in figuring out what is required, and the penalties for screwing up are severe, so you may want to anyway.
- m_eiman 18y agoThis is what they have to say about this: """How do I determine whether my business would be required to do a full independent assessment or a self assessment? Merchants that store payment account data should contact the acquiring financial institutions with whom they have merchant agreements to determine whether they must validate compliance and the specific requirements for compliance validation. Service providers should contact the individual payment brands for further information. """ Wonderful example of saying "we're not saying until you're paying" in as words as possible.
- andrewf 18y agoMost banks will have a standard policy, and you should be able to dig it out of their sales guys.