News for hackers. Stuff that matters.

A comment on Apple Unveils the iPad Pro. Parent comment

Re:Apple Unveils the iPad Pro by clinta on Friday September 11, 2015 @11:20AM (#10204150)
The endpoints don't need to be in scope if they're not storing PII.
[ Parent | on HN ]
Re:Apple Unveils the iPad Pro by dogma1138 on Friday September 11, 2015 @01:18PM (#10204898)
PCI-DSS the endpoints you use to connect to the CHD environment are in scope, other endpoints that are used to interact with CHD data e.g. POI's or CS terminals are also in scope.

HIPAA endpoints that are used to access, view or input patient data are in scope.

I am a QSA.

[ Parent | on HN ]