Timeline for Securing an E-commerce site
Current License: CC BY-SA 2.5
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 20, 2010 at 15:19 | comment | added | Scott Pack | +1 for passing the buck. The cost of compliance is very often MUCH higher than the cost of outsourcing. | |
| Dec 19, 2010 at 19:33 | comment | added | AviD♦ | @Rory - I'd love that! :D | |
| Dec 19, 2010 at 18:58 | comment | added | Rory Alsop♦ | With your permission - I'd like to quote AviD's law of compliance on the PCI-DSS side :-) To be honest, I wasn't really including PCI-DSS as 'assurance' on this - my view of assurance is considerably more in depth! | |
| Dec 19, 2010 at 12:55 | comment | added | AviD♦ | @Rory, I wish that were true :). But, it does bring up once again [ AviD's Law of Compliance ](security.stackexchange.com/q/622/33#631): "PCI compliance reduces the risk of the penalties of non-compliance" | |
| Dec 19, 2010 at 12:13 | comment | added | Rory Alsop♦ | +1 on the 'get someone else to do it for you' piece. This side of the industry is very well developed now and the most of the main providers understand security architecture, secure development and testing and audit - you can't absolve all responsibility for security, but if you can gain assurance that a provider will do this to the level you need then you just need to worry about your end. | |
| Dec 19, 2010 at 6:40 | history | answered | AviD♦ | CC BY-SA 2.5 |