Define your involvement with PCI/DSS;
- Have you been involved in a PCI/DSS certification process?
- What are your views of this standard?
- Current version vs original versions
- What is new/interesting in the latest version?
- Where does PCI/DSS work?
- Where doesn’t it work?
- What would you do better?
- Should PCI/DSS be a company wide standard for websites that handle customer data?
Back to all challenges