Jim G.less info
|visits||member for||2 years, 1 month|
|seen||Apr 11 '12 at 21:27|
|Open source firewall with multi wan support|
PCI Audit: Using “test” cards
I think your auditor is taking the rule beyond it's intended purpose. The rule is meant to prevent real cardholder data from being stored in test environments. It all comes down to protecting cardholder data. Running a real transaction with real funds is not the same as using a real card number on a test server. I consider this a regular transaction. The fact that you are verifying the information is irrelevant. But I am not a PCI auditor...