an ASP.NET Open Source CMS & eCommerce platform
Search:
Last Post 12/22/2010 11:30:30 AM By lukezy. 1 replies.
12/22/2010 10:55:11 AM
KevinColeman
Posts: 1
Joined: 12/22/2010
PCI Compliance
Is DSC PCI compliant? Has it been certified by a third party? Does it follow OWASP guidelines and recommendations for credit card handling and general web application security best practices?
12/22/2010 11:30:30 AM
lukezy
Posts: 2109
Joined: 6/12/2007
Location:WA, US
Re: PCI Compliance
Yes, DSC is PCI compliant. It follows OWASP guidelines. However it doesn't mean you are automatically PCI compliant if you are using DSC. That's because PCI compliance refers to the entire ecommerce system that powers your store, including your Web hosting environment and the payment gateway used for credit card processing. You need to sign up for PCI compliance testing with one of the companies that offer this service. There are many vendors that offer this service, e.g. McAfee. The PCI compliance testing service that you sign up with will ask you questions about your entire ecommerce system (e.g. where you are hosted, which payment gateway you are using, etc.).
 
Our virtual dedicated server will get you certficated for up to level 2 PCI compliant.
DotShoppingCart Staff