Tag Info

New answers tagged

0

In Canadian privacy regulation, public bodies are not able to transfer or store PII of citizens outside of Canadian borders (it should cross border, because data exchanged to US can be monitored). Therefore, none of government or crown organizations in Canada use AWS for any purpose. The restriction is so strict that apparently Microsoft is planning to open ...


2

I don't know URAC, it appears to do with HIPPA based on cursory googling, though I would assume the context of what is trying to be achieved is the same as other sectors (for me finance). I would say there are three categories that are important: General Knowledge: This would be everyone's responsibility. A common reference to this is your information ...


0

IANAQSA, and all quotes from Understanding SAQs for PCI DSS version 3: Based on the information you've provided, you'd be a SAQ D. SAQ A and A-EP are ruled out for you because they can have "no electronic storage, processing, or transmission of any cardholder data on the merchant's systems". When you say We accept CC information on our secured hosted ...


0

My thoughts: Here is a good link that explains different SAQ levels. If you are a service provider, you need to fill out SAQ D for service provider. Your clients would definitely need to obtain PCI compliance as they are collecting CC data. Another thing that might help you with this discovery is the PCI third party security assurance information supplement ...



Top 50 recent answers are included