News for hackers. Stuff that matters.

A comment on SaaS CTO Security Checklist. Parent comment

Re:SaaS CTO Security Checklist by someonehere on Thursday May 30, 2019 @09:56PM (#20057675)
Yeah but when you partner with companies, they sometimes force your company to adhere to those ancient guidelines.

I’ve worked for companies where they ask for the out of date NIST stuff you mention and it’s either you follow what they ask or you lose out on a deal to fund your company.

[ Parent | on HN ]
Re:SaaS CTO Security Checklist by DKnoll on Friday May 31, 2019 @12:50AM (#20058306)
If you require PCI DSS compliance it won't fly either.

https://pcipolicyportal.com/blog/pci-compliance-password-req...

[ Parent | on HN ]
Re:SaaS CTO Security Checklist by yaleman on Saturday June 01, 2019 @12:18AM (#20067214)
If you require PCI DSS I hope you're not just blindly following some random post on hackernews for your policy ;)
[ Parent | on HN ]
Re:SaaS CTO Security Checklist by DKnoll on Saturday June 01, 2019 @12:35AM (#20067258)
I'm not, that's why I know PCI DSS requirements off-hand.
[ Parent | on HN ]
Re:SaaS CTO Security Checklist by downtown_ on Sunday June 02, 2019 @01:17PM (#20076690)
No. You can use NIST guidance and are not required to change your password every 90 days
[ Parent | on HN ]