Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
1 9
Impact
~8k people reached

  • 0 posts edited
  • 1 helpful flag
  • 7 votes cast
Jul
21
awarded  Notable Question
Oct
14
awarded  Popular Question
Jul
2
awarded  Curious
Mar
25
awarded  Popular Question
Oct
1
comment How can Stripe be PCI-compliant?
Ok, but Stripe is just a payment gateway. They still need to send the CVV to their acquirer when making a transaction. And ultimately, it's not Stripe who decides whether the user knows or does not know the CVV; it's the credit card issuer, right? What am I missing?
Aug
29
asked How can Stripe be PCI-compliant?
Feb
25
accepted Can change management for PCI compliance be accomplished via simple emails?
Feb
5
awarded  Citizen Patrol
Feb
1
asked Can change management for PCI compliance be accomplished via simple emails?
Jan
31
accepted How to satisfy requirement 10.6 of PCI DSS?
Jan
31
accepted “Due diligence” in PCI requirement 12.8.3
Jan
31
comment Requirement 12.1.2 of PCI DSS: Is it enough to point to a standard process?
It's our first PCI assessment, so we haven't yet gone through the annual process yet. But even if we had, couldn't we just show the resulting documents? I mean, the list of threat sources, vulnerabilities etc?
Jan
31
asked Requirement 12.1.2 of PCI DSS: Is it enough to point to a standard process?
Jan
30
asked “Due diligence” in PCI requirement 12.8.3
Jan
29
awarded  Scholar
Jan
29
accepted What should I have prepared for a PCI compliance onsite assessment?
Jan
29
comment How to satisfy requirement 10.6 of PCI DSS?
If I understand you correctly, to satisfy this requirement, we need to have an experienced sysadmin, who will analyze the logs and, based on his experience and a bit of gut feeling, spot potential threats. So, how do I explain this to the QSA in a written procedure document?
Jan
29
awarded  Supporter
Jan
29
awarded  Editor
Jan
29
revised What should I have prepared for a PCI compliance onsite assessment?
added 330 characters in body