WebApp Sec mailing list archives

Re: PCI DSS Compliance


From: Roberto Tanara <tanara () protechta it>
Date: Wed, 21 Dec 2005 09:50:15 +0100

Craig Wright wrote:

The company seeking the test is seeking compliance not necessary security. These are very different things.
Maybe I am missing something, but as a customer, how could I trust a company that seeks "compliance not necessary security"? Does the compliance make me feel better if something bad happens?

--
Roberto Tanara
Protechta Information Security



Current thread: