3 ms·
I don't think the OP was questioning the practical need to be PCI-compliant. I think the question was as to how useful PCI actually is at protecting users. (i.e
by michaelmior 12y ago
I don't think the OP was questioning the practical need to be PCI-compliant. I think the question was as to how useful PCI actually is at protecting users. (i.e. does it actually prescribe best practices or is it just smoke and mirrors)
- adrr 12y agoIts pretty decent. It has requirements on logging including kernel level logging. The ASV tests are pretty through in terms of testing for known vulnerabilities. I failed my first ASV test because my allowed ciphers where vulnerable to the BEAST attack.