Educause Security Discussion mailing list archives

PCI and common access computers


From: "Flynn, Gary" <flynngn () JMU EDU>
Date: Thu, 25 Mar 2010 09:45:53 -0400

It has been suggested that these types of computers that people could use
to perform credit card transactions may be in-scope for PCI compliance
requirements. Anyone heard anything like that? I don't see how it could
ever work as you couldn't restrict the access to the credit card requesting
sites because they could be anywhere. And you really couldn't reliably 
prevent people from typing them either.

Current thread: