I read another question which made me think... If you encrypt PCI data (credit card numbers, etc.) using PGP or AES and send it through a firewall, is that firewall in scope? Alternatively, what ...
Say I have an application that takes credit cards, but this is actually a payment gateway on the internet that I don't control. The web site used HTTPS and only returns if the card was authorized or ...
Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?
Not completely au fait with PCI compliance, however we have our server checked each month by our host to check it is PCI compliant, because we have to keep it PCI Compliant for a specific ...
Is it OK to generate a token for a credit card without the user's permission? Is that PCI compliant?
Is it PCI compliant to generate a token for every card used for processing, regardless of whether the client asked for his card to be saved or not?
I'm using the 3/2/1 network segmentation model from the open pci dss scoping toolkit and I'm running into a bit of a mental roadblock. I have a phone system (Mitel 5000 series, if it matters) that is ...