60 reputation
3
bio website
location
age
visits member for 2 years
seen Jul 1 '13 at 10:15

I am currently working for a small company that provides aggregated flight data via an API. I am charged with helping the origination become PCI DSS complaint. The learning curve is steep but I find IT security fascinating and have become obsessed by security and making sure my company is as safe it can get.


Oct
19
accepted If I storing my own cards in a database. Does this fall under PCI compliance framework?
Oct
17
asked If I storing my own cards in a database. Does this fall under PCI compliance framework?
Sep
21
asked PCI Policy Management software?
Sep
17
accepted Can we print cardholder data under the PCI DSS Compliance framework and stay compliant?
Sep
14
asked Can we print cardholder data under the PCI DSS Compliance framework and stay compliant?
Aug
1
awarded  Supporter
Aug
1
accepted What is the most cost effective way to comply with PCI requirement 6.5, developer training?
Aug
1
comment What is the most cost effective way to comply with PCI requirement 6.5, developer training?
@Hendrik Brummermann thank you for the question edit and the clarification comment. Great help indeed!
Jul
31
comment What is the most cost effective way to comply with PCI requirement 6.5, developer training?
@Rook please mate, understand the question. I want to know if anyone has suggestions on saving money with regards to developer training. If I wanted to lie I would not bother posting questions. Thank you for the input anyway.
Jul
31
comment What is the most cost effective way to comply with PCI requirement 6.5, developer training?
@Polynomial I think you totally miss the point of the question. If I chuck 90% of the budget on developer training how will I pay for the independent audits? The scans? The policy development? and so on....Look, I am working for a small company on a tight budget. I think you will find in the current economic climate more and more folks will be looking to do things cost effectively.
Jul
31
comment What is the most cost effective way to comply with PCI requirement 6.5, developer training?
No Rook. Not at all! Like I mentioned before we are a small company that need to comply, we do not have bottomless resources available. We want to be sure we keep customer data safe but we also have to do it in a cost effective manner!
Jul
31
asked What is the most cost effective way to comply with PCI requirement 6.5, developer training?
Jul
26
awarded  Scholar
Jul
26
accepted Storing only BIN part of PAN, does this qualify as a full PAN?
Jul
26
comment Storing only BIN part of PAN, does this qualify as a full PAN?
Thank you. That clears it up for me. Even if truncated if stored on disk 3.4 will apply.
Jul
26
awarded  Student
Jul
26
comment Storing only BIN part of PAN, does this qualify as a full PAN?
Hi Gael. Thank you for the answer. My question then is if I truncate the PAN to first 6 digits. Totally discarding the rest in memory. Do I still need to comply with section 3.4?
Jul
26
asked Storing only BIN part of PAN, does this qualify as a full PAN?