Yes, DSC is PCI compliant. It follows OWASP guidelines. However it doesn't mean you are automatically PCI compliant if you are using DSC. That's because PCI compliance refers to the entire ecommerce system that powers your store, including your Web hosting environment and the payment gateway used for credit card processing. You need to sign up for PCI compliance testing with one of the companies that offer this service. There are many vendors that offer this service, e.g. McAfee. The PCI compliance testing service that you sign up with will ask you questions about your entire ecommerce system (e.g. where you are hosted, which payment gateway you are using, etc.).
DotShoppingCart Staff
|