PCI compliance

[TannersCreek]

I used to use a different credit card processor and needed to update myn PCI compliance once a year.  Now I am just using PayPal, so do I need to pay Security  Metrics to be in compliance or is that done by PayPal?

[snowshoe]

Depends on which PayPal product you plan to use.  Payments Standard, no, Payments Pro, yes.

[TannersCreek]

its a standard business account.

[snowshoe]

Should be fine.

[TannersCreek]

Thanks.  Security Metrics disagrees, but I think they are just looking for the money. Thanks.

[RXLabels]

I'm wracking my brain to determine which type account mine is.  I think it is Standard, but I cannot find anywhere where it says so one way or the other for certain.   

I used use First Data and the PCI requirements for my tiny business drove me away.   These people from SecurityMetrics are relentless and are now quoting my state's legal codes at me.  I'd love to be able to stop ignoring them and finally just tell them to bugger off.

I only use the system one way.  I get CC numbers by phone and dial into VM to place the payments from my home-office computer.

[TNGWeb]

The nasty is, YES, regardless, you are still making or creating sales online. According to https://pcissc.secure.force.com/faq/articles/Frequently_Asked_Question/Does-PCI-DSS-apply-to-merchan... you need a minimum of SAQ-A self compliance. You may also need to put your site/server through several security audits quarterly. I own a hosting company and just finished with McAfeeSecure to meet PCI/DSS and Server security.