PCI-DSS includes the web servers that redirect users to third parties?

[software4ed]

The IT Manager at a company where I want to install Actinic has stated that...

"PCI-DSS includes the web servers that redirect users to third parties.
As I understand it, there are new requirements"

in response to my comments that "as WorldPay are PCI-DSS compliant and they handle all card payments the server hosting the catalog does not have to be PCI-DSS compliant."

Am I wrong? does anyone know if there new restrictions coming?

[Mike Hughes]

Ignore him.

PCI-DSS only applies where credit card details will be entered or stored.

Outside of this area it has no authority and while there's a whole industry of consultants, experts, verifiers and hosts who might want to argue it's important outside of this area I think they're all barking up the wrong tree.

Mike