3 ms·
Most of these questions can be rolled up into: Where is their proof of PCI Data Security Compliance[1]? The fact that the submitter responded to your detailed
by AdieuToLogic 11y ago
Most of these questions can be rolled up into:
Where is their proof of PCI Data Security Compliance[1]?
The fact that the submitter responded to your detailed and relevant questions with "This is helpful; I'll get you a good response when I have a good moment" is reason enough to run as far away as possible from this.
1 - https://www.pcisecuritystandards.org/financial_institutions/ https://www.pcisecuritystandards.org/financial_institutions/
- iffycan 11y agoI'm sorry I haven't had time to respond. I meant "this is helpful" to respond to his hope that his questions were helpful, rather than mean spirited, for instance. We currently have no proof of PCI compliance, yes, but we will. I personally have worked in the PCI space for the last decade and understand how important it is. What's lacking in this service isn't good security, but public documentation of that security. We will work on that.
- wglb 11y agoI don't think PCI is anywhere near the minimum that is needed. In the JP Morgan hack: did their PCI compliance help their status? In the Target breach: did their PCI compliance help prevent their attack? How about the Global Payments breach of a couple of years ago? So with respect to Most of these questions can be rolled up into, i would post a Strong Disagree.