News for hackers. Stuff that matters.

A comment on Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance?. Parent comment

Re:Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance? by rpug on Monday April 29, 2013 @05:42PM (#5629032)
Does cardholder data ever pass through your infrastructure in any form?
[ Parent | on HN ]
Re:Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance? by Eyes2design on Monday April 29, 2013 @06:21PM (#5629244)
In magento, yes... but the full information is held for a small amount time. The module is self hold no card info its a run once and then destroy.
[ Parent | on HN ]
Re:Ask HN: Frustrations with PCI-DSS, HIPAA, SOX compliance? by rpug on Monday April 29, 2013 @06:55PM (#5629406)
Not that I am an auditor, but if the data ever hits your environment then you have a level of compliance to maintain.
[ Parent | on HN ]