121 reputation
1
bio website
location
age
visits member for 2 years, 9 months
seen Apr 11 '12 at 21:27

Mar
2
awarded  Teacher
Mar
2
answered Open source firewall with multi wan support
Jan
22
comment PCI Audit: Using “test” cards
I think your auditor is taking the rule beyond it's intended purpose. The rule is meant to prevent real cardholder data from being stored in test environments. It all comes down to protecting cardholder data. Running a real transaction with real funds is not the same as using a real card number on a test server. I consider this a regular transaction. The fact that you are verifying the information is irrelevant. But I am not a PCI auditor...