PCI compliance/security metrics

[Ian Clyde]

Hi,

I appreciate there has been much discussion on the above subject, but can someone just advise me that if I use a PSP and do not take phone orders (hence do not process card details anywhere on my site/pc/server), what is the process for completing a 'self-assessment'? HSBC advise me I still have to use Security Metrics or similar. Is this true or can you do this completely independently?

Apologies is its a dense question - appreciate any help out there - thanks.

Ian.

[Darren B]

Not a dense question as the banks are actually making it more confusing.

you do not require the likes of security metrics however proving it to them is probably going to be hard. You just need to self assess, i cant remember what level they call it though

[pinbrook]

try this

http://community.actinic.com/showpos...&postcount=144

[Ian Clyde]

Jo/Darren,

Thats great, big help, thanks for your time.

Ian.