[AusNOG] Security for CC details of new signups

[Chris Jones]

On 06-Jul-2010, craig at askings.com.au wrote:
> > But seriously, +1 for PCI-DSS, make it mandatory.
> 
> My understanding is that PCI-DSS is mandatory for all CC merchants that
> store credit card details. You choice is get audited etc or outsource to
> someone that already has been.

Don't necessarily need to audit.  Unless it's changed in the last year, most smaller merchants have the option to "self-audit", rather than having a third party come in and do an external audit.

Regards,

Chris