http://newschoolsecurity.com/2009/05/pci-data-available/ The Blog Inspired By The Book Wed, 16 May 2012 16:05:54 +0000 hourly 1 http://wordpress.org/?v=3.3.2 http://newschoolsecurity.com/2009/05/pci-data-available/#comment-104 Mike Sat, 16 May 2009 03:28:08 +0000 http://newschoolsecurity.com/?p=152#comment-104 Ben, we life in a world of bounded rationality and limited information. The stats are based on reported information. Also, these are not "compliance" numbers but rather "validation" numbers. Ben, we life in a world of bounded rationality and limited information. The stats are based on reported information. Also, these are not “compliance” numbers but rather “validation” numbers.

]]> http://newschoolsecurity.com/2009/05/pci-data-available/#comment-102 Ben Fri, 15 May 2009 22:19:27 +0000 http://newschoolsecurity.com/?p=152#comment-102 I'm confused... are we supposed to take L2-3 "compliant" numbers at face value? How do we know these merchants are actually compliant? Filling out a SAQ is very easy, but validating those claims is a completely different story, isn't it? I’m confused… are we supposed to take L2-3 “compliant” numbers at face value? How do we know these merchants are actually compliant? Filling out a SAQ is very easy, but validating those claims is a completely different story, isn’t it?

]]>