Tagged Questions
2
votes
1answer
147 views
Are banks required to be PCI compliant?
Since credit card transactions like cash advance can be performed at most ATMs, are banks required to be PCI DSS compliant?
2
votes
3answers
189 views
Client is not storing Credit Cards Securily (near plain text). How do I convince client to be more secure?
I am writing in regards to PCI-DSS compliance for taking credit cards. A client of mine is not willing / does not want to bump up security beyond what is currently done for their credit card data. All ...
2
votes
3answers
146 views
PCI Compliance Problem
My company is trying to become fully PCI Compliant and we are switching our outdated systems to use Authorize.net CIM among other things. But, currently we're all over the place and until our new ...
3
votes
1answer
192 views
Conceptual design of vulnerability scanning program in global retail network (PCI DSS)
I am trying to design yearly program to scan for vulnerabilities on a very large network of payment terminals.
The company has thousands of retail points all around the world which need to be ...
2
votes
2answers
469 views
Why does Amazon ask for the CVC/CVV if it bills without it?
I have a follow-up question relating to this question:
How does Amazon bill me wihout the CVC / CVV / CVV2?
If amazon.com can bill without the CVV why does it ask for it the first time information ...
1
vote
1answer
137 views
Which PCI DSS SAQ applies when you don't store store but transmit CHD?
We have a merchant website that uses Authorize.net's AIM. Cardholder data (credit card number, expiration date, etc.) is entered at our website. Then it's transmitted to payment gateway and isn't ...
16
votes
2answers
3k views
Minimum requrements for storing last 4 digits of credit card number?
We have a merchant website that uses Autorize.net's CIM and AIM. Our users may have multiple credit cards so we'd want to give them opportunity to distinguish between credit cards that they use on ...
0
votes
2answers
236 views
Is this way of using Authorize.net's CIM PCI compliant?
We have a webapp where Authorize.NET's CIM and AIM are used for payment operations. When user buys something at first time he enters his CC number and other billing information at our site. This ...
16
votes
4answers
745 views
How to convince coworkers to not store credit card numbers ourselves
The company I work for needs a system to perform monthly credit card charges to customer accounts. Customers will be able to update their credit card information from an online interface written in ...
0
votes
2answers
175 views
Signing up on a paid site with a credit card
I'm building a subscription-based website that needs to accept recurring payments. The concept is much like that of Netflix, but there is also a variation between the two.
When a user attempts to ...
