Does anyone know of PCI compliance management software (specifically PA-DSS, but I'm assuming any kind of PCI-DSS software will do PA-DSS)? Mainly for our application end. We have a 3rd party site but I'm looking for something we can host in house that I can allocate permissions to individual team members to do primary signing before we go through and have management sign off on it. Just some kind of rudimentary system of documentation that we can track who changes it and when.
Currently we have binders of paper, I'm really not liking this because of how inflexible it is, and the amount of paper we can go through with various iterations.
I've been tempted to just drop the entire compliance document into a wiki template and drop the template into a per-project documentation setup, but it sounds like a huge pain to do in the first place, and wouldn't be nearly as friendly for the developers (not that learning Wiki markup is hard, but keeping track of where you are in the template will probably be annoying).
Anyone have any better ideas?
Basically I want a digital version of this checklist:
That I can see who filled it out, and go back and check earlier revisions, we'll go ahead and keep physical copies once new software is complaint, but this will be used as a tool to easily check and know when the last check was done, and how compliant we are in various projects.
If not, this seems like a simple enough project to be my venture into releasing some FOSS. :)