Denotes compliance with the PCI Data Security Standards, a set of requirements designed to ensure companies processing, storing or transmitting credit card information properly secure that information.
0
votes
0answers
43 views
Usual Suspects: Typical 3rd Party Entities in E-Commerce [closed]
I am doing some requirements/analysis for a web app that I'd like to build (Ruby/Java developer here). This web app would have a store front, shopping cart and would need to be totally compliant with ...
3
votes
5answers
121 views
Attaining credit card data
I've read the many posts on this site that say we are not allowed to store cc numbers if we are not pci-compliant. But, I'm wondering if it is possible to send a CC number through a form to an email ...
4
votes
1answer
295 views
Does including Google Analytics on a page makes you run the risk of failing a PCI audit?
My webshop is currently in the process of becoming PCI compliant.
For business intelligence reasons we would like to include Google analytics code (or a code from a similar package) on the checkout ...
3
votes
2answers
67 views
Credit card payments on mobile websites
I am quite confused regarding PCI requirements.
Say if I want to develop a mobile web browser based shopping portal, am I allowed to? Under the PCI requirements?
3
votes
2answers
294 views
PCI compliance when using third-party processing
My company is outsourcing the development of our new e-commerce site to a third party web development company. The way they set up our site to handle transactions is by having the user enter the ...
2
votes
2answers
196 views
PCI-Compliance: Automatic saving of Credit Cards to Authorize.net CIM
Our website uses authorize.net CIM to store consumer credit card's securely after a user's initial purchase. We currently do not have an "opt-in" button allowing us to do this. However, after ...
2
votes
1answer
215 views
What are the PCI compliance and security implications for processing payments through my embeddable widget?
I've built a little embeddable Javascript widget that list items for sale for publishers to embed on their site. The current use case is that when the user clicks on an item, they are redirected to my ...
2
votes
1answer
107 views
Off-site Cardholder Data Storage
Is there a service or site out there that will store cardholder data for me? I don't need any kind of transaction processing or recurring billing... I just need somewhere that I can store data on ...
1
vote
2answers
506 views
If I must turn off passive ports to be PCI compliant, how do I upload my website?
Our company is undergoing procedures to ensure we are PCI compliant.
My site host tells me that they have disabled passive ports in order to pass the PCI scans. This has the effect of disabling ...
9
votes
5answers
158 views
Is PCI compliance scrutinised?
After reading the very strongly worded recommendations regarding the storage of credit card details here, I've got to wonder - what happens if a non-PCI compliant company starts storing credit card ...
