News for hackers. Stuff that matters.

A comment on Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance?.

Re:Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance? by Eyes2design on Monday April 29, 2013 @04:57PM (#5628701)
I wonder myself, I'm trying to find information about PCI-DSS.

I Program the integrations from online stores to payment gateways. None of my programs saves any credit card info, yet I'm not sure if I can state that their PCI compliance?

"Merchant / Services" I can understand, but what about a "piece" of software?

[ Parent | on HN ]
Re:Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance? by rpug on Monday April 29, 2013 @05:42PM (#5629032)
Does cardholder data ever pass through your infrastructure in any form?
[ Parent | on HN ]
Re:Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance? by Eyes2design on Monday April 29, 2013 @06:21PM (#5629244)
In magento, yes... but the full information is held for a small amount time. The module is self hold no card info its a run once and then destroy.
[ Parent | on HN ]
Re:Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance? by rpug on Monday April 29, 2013 @06:55PM (#5629406)
Not that I am an auditor, but if the data ever hits your environment then you have a level of compliance to maintain.
[ Parent | on HN ]