TOPIC: Credit Card PCI Compliance Letter

I just spoke with FNMS about my PCI compliance. According to them, it does not apply to me and I do not have to pay the fee or fill out the questionnaire. I asked why, but she did not know. She said that her boss said it didn't apply to me.

Huh? That's not even possible. If you touch credit card data, it applies. Sounds like someone new didn't know what they heck they were talking about. Visa explains it on their site: www.visa.com/cisp

I called them today. She even asked her boss and was told it didn't apply to me. They never sent me a letter about it and have not charged me a fee either. I heard about it on this thread. It may be because the client enters the information. I am not sure. She didn't know why.

Today I get a letter saying I have to do the compliance. I guess the bank didn't know what the hell they were talking about. Anyway, I don't understand all the questions. Do we have to answer all of them? There are 227 questions. I do not know the answer to all those questions, doesn't the bank know all the technical details?

Has anyone completed their compliance yet?

About 75% of the guys have completed compliance based on the last review that I saw. Most of the questions are regarding your business practices and maintaining CC protection. Those that are technical you can ask me. Just email me anything you don't know the answer to.

Unfortunately, this isn't the bank, it's a third party compliance company called TrustWave. The bank themselves aren't allowed to do it and we're not allowed to pre-answer certain questions for you.

So 227 questions sounds right to you?

What is a loader?

What is the scan they want to do? And do I have to set up a scheduled monthly scan? I tried a scan and it failed.