Re: PCI question

I have received several pieces of feedback indicating that the requirement
that I am attempting to meet may not be legitimate. Something that I
failed to mention in my initial posting is that we are at PCI level 2. Any
companies not at a level 1 or 2 certainly do not need to meet the
requirement I inquired about and so would not be aware of it. Also, I
understand that the level 2 requirements have changed recently with
several level 1 requirements being rolled into it so it is possible that
level 2 companies that had previously passed a PCI audit might no longer
be in compliance. I am pushing back on my PCI advisor to confirm that this
really is a requirement and not a nice-to-have. Thanks to everyone who
responded to me.

================================================================
This e-mail is only intended for the person(s) to whom it is addressed and
may contain confidential information. Unless stated to the contrary, any
opinions or comments are personal to the writer and do not represent the
official view of the company. If you have received this e-mail in error,
please notify us immediately by replying to the e-mail and then deleting
this message from your system. Please do not copy it or use it for any
purposes or disclose its contents to any other person. Thank you for your
cooperation.
================================================================