Discussions
PCI Compliance in Trustwave
We have E-Commerce and have been doing periodical scan and yearly questionnaire from Trustwave to be in PCI compliance.
And we feel like answering questionnaire is tricky and not easy; some questions don't make sense at all to us.
We are having our IT personnel to answer those yet according to him, lot of questions can only be answered by our outsourcing vendors such as payment gateway, server company and so on.
I am guessing that many of your E-Commerce is being supported by outsourcing vendors as ours is and would like to know how you are doing it to be in compliance.