RE: PCI DSS Compliance

You do it every day

1 in 100 do anything different to this

Craig

-----Original Message-----
From: Roberto Tanara [mailto:tanara@protechta.it]
Sent: 21 December 2005 7:50
To: webappsec@securityfocus.com
Subject: Re: PCI DSS Compliance

Craig Wright wrote:

> The company seeking the test is seeking compliance not necessary
security. These are very different things.
>
Maybe I am missing something, but as a customer, how could I trust a
company that seeks "compliance not necessary security"? Does the
compliance make me feel better if something bad happens?

--
Roberto Tanara
Protechta Information Security



Liability limited by a scheme approved under Professional Standards Legislation 
in respect of matters arising within those States and Territories of Australia 
where such legislation exists.

DISCLAIMER
The information contained in this email and any attachments is confidential. If 
you are not the intended recipient, you must not use or disclose the 
information. If you have received this email in error, please inform us 
promptly by reply email or by telephoning +61 2 9286 5555. Please delete the 
email and destroy any printed copy. 

Any views expressed in this message are those of the individual sender. You may 
not rely on this message as advice unless it has been electronically signed by 
a Partner of BDO or it is subsequently confirmed by letter or fax signed by a 
Partner of BDO.

BDO accepts no liability for any damage caused by this email or its attachments 
due to viruses, interference, interception, corruption or unauthorised access.