Re: PCI audit and 3rd Party hosted software. -- PCTECH

Good News Everybody!

The new search engine is LIVE!

Please report any problems to david (at) midrange.com.

Subject: Re: PCI audit and 3rd Party hosted software.
From: Tom Jedrzejewicz <tomjedrz@xxxxxxxxxxxxxx>
Date: Thu, 17 Dec 2009 20:43:14 -0800
List-archive: <http://archive.midrange.com/pctech>
List-help: <mailto:pctech-request@midrange.com?subject=help>
List-id: PC Technical Discussion for iSeries Users <pctech.midrange.com>
List-post: <mailto:pctech@midrange.com>
List-subscribe: <http://lists.midrange.com/mailman/listinfo/pctech>, <mailto:pctech-request@midrange.com?subject=subscribe>
List-unsubscribe: <http://lists.midrange.com/mailman/listinfo/pctech>, <mailto:pctech-request@midrange.com?subject=unsubscribe>

On Thu, Dec 17, 2009 at 6:52 PM, Jim Franz <franz400@xxxxxxxxxxxx> wrote:

Tom - are you sure the "Y" (A) does not need to have their network audited
if their local pc's are used to take the card information and the keyboard,
a possible swipe, and local pc's are used to communicate to "C".
I was sure the PCI audit covers more than the storage of data, but also the
entry points of that data.
Jim Franz

No, I am not sure. My take is that if the destination web site uses SSL
then the client is (theoretically) insulated, unless they store info other
places, such as on scanned payment forms. But as I said, getting an auditor
to agree will be tough.

---------
Tom Jedrzejewicz
tomjedrz@xxxxxxxxxxxxxx

Follow-Ups:

Re: PCI audit and 3rd Party hosted software. , Jim Franz

This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.