I had followed theses 9 steps for build my compliance in this last year. I think it’s a good approach for big processor and all PSP. Establishing the PCI Project (Actors, budget…). Determine the scope (CDE). Review the information Security Policy (ISP or PSSI for french people). Conduct Gap Analysis. Conduct Risk Analysis. Establish the…
Daily Archives: July 5, 2014
PCI DSS
3 Myths about PCI DSS
by Marc-Frederic Gomez •
The potential scope of your compliant CardHolderData Environment (Known CDE) may seem dating. A small merchant or a big processor have different level about security processes, documentations or time to secure this area. I have check lot of myths about PCI on my different experiences. In first, I will share with you 3 myths. Don’t listen any…