Re: nessus to PCI

[David Rice <drice39 () cox net>]

Mr Wizard wrote:

> Unless you can get the Nessus Open Source Vulnerability Scanner
> project team to certify Nessus with the Visa & MasterCard PCI program,
> I would not advise using this tool for client engagements.
>
> Mr. Wizard.
>
> On 6/22/05, Vic N <vic778 () hotmail com> wrote:
>  
>
> > Can you be more specific?  Is this PCI 1.0?  And are you talking about a
> > specific section like section 1 or other sections?
> >
> >    
> >
> > > Has anyone had any luck mapping nessus results to the Payment Card Industry
> > > (PCI) Data Security standard?
> > >      
> >
> >    
>
>
>  
I didn't think you could use GNU or open source code for PCI audits and 
standards.