4 ms·
It depends on how you approach it. You can pass the certification just with checkboxes/paperwork or you actually try to understand the reasoning behind requirem
by lsh123 12y ago
It depends on how you approach it. You can pass the certification just with checkboxes/paperwork or you actually try to understand the reasoning behind requirements to make things better.
- adrr 12y agoPCI level 1 is more than checkboxes. Its an independent auditor coming in to confirm compliance.
- lsh123 12y agoBeen there, done that. Still a lot of checkboxes. The auditor will not likely to really understand the details of your setup. E.g. you can install firewall with all ports open, then document this setup, justified business reasons. And then it is technically enough to complete section 1. Of course it would not anything extra to your security.