PCI-DSS Compliance is different than validation

An interesting discussion that I have been having of late, is the fact that many people do not really comprehend the difference between PCI-DSS compliance and validation requirements. Here it is in a nutshell:

Compliance: Everyone has to be compliant to 100% of the PCI-DSS standard 100% of the time, regardless of “level”. There is NO distinction between a level 1 and a level 4 in terms of their compliance requirements.

Validation: A set of things “to do” to assure to another that you are compliant. Typically based on transaction volume and/or type of organization (i.e., service provider, gateway, merchant, etc.). Validation is where the terms level 1,2,3,4 are used. There are different requirements, defined by card brand or acquirer, that must be done for different levels. It should be noted that the existence of the PCI Security Council is a step at making the validation requirement consistent through out the industry.

So, everyone who “stores, processes, or transmits cardholder data” is required to be 100% compliant 7×24, however depending on their business, the validation requirements differ.

The analogy I like to use it speed limit. The law says that you have to “comply” with the speed limit. However, there is only periodic “validation” of that compliance. Not the best analogy, but it gets the point across. So when a level 4 asks me “do I really have to be compliant with 12.1”, the answer is “YES!”. The real question is, what does it mean to be compliant? For my thoughts on that see my previous post on selecting QSA.

46 replies
  1. tinyurl.com
    tinyurl.com says:

    I have read a few good stuff here. Certainly worth bookmarking for revisiting.

    I wonder how so much effort you set to make one of these wonderful informative web site.

  2. plenty of fish dating site
    plenty of fish dating site says:

    Hi there, i read your blog occasionally and i own a similar one and i was
    just wondering if you get a lot of spam responses?
    If so how do you stop it, any plugin or anything you can recommend?

    I get so much lately it’s driving me insane so any help is very much appreciated.

  3. ps4 games
    ps4 games says:

    Usually I do not learn article on blogs, but I would like to say that this write-up very forced me to try and do so!
    Your writing taste has been surprised me.
    Thank you, very great post.

  4. quest bars cheap
    quest bars cheap says:

    Hi, i think that i noticed you visited my blog thus i came to go back the prefer?.I’m attempting to find issues to
    improve my site!I assume its ok to make use of a few of your ideas!!

  5. ps4 games
    ps4 games says:

    Wow, superb blog format! How lengthy have you ever been blogging for?
    you make running a blog look easy. The full look of your site is fantastic,
    let alone the content material!

  6. quest bars cheap
    quest bars cheap says:

    You could definitely see your expertise in the article you
    write. The arena hopes for even more passionate writers like
    you who are not afraid to mention how they believe.
    All the time follow your heart.

  7. quest bars cheap
    quest bars cheap says:

    Thank you for every other informative site. The place else could I get that kind of info written in such a perfect method?

    I’ve a project that I’m just now running on,
    and I have been at the glance out for such information.

  8. ps4 games
    ps4 games says:

    Hey there! Someone in my Facebook group shared this website with us so I came to take a look.
    I’m definitely enjoying the information. I’m book-marking and
    will be tweeting this to my followers! Fantastic blog and terrific design and style.

  9. ps4 games
    ps4 games says:

    I am really loving the theme/design of your website. Do you ever run into any web browser compatibility
    issues? A small number of my blog audience have complained about my site not working correctly in Explorer but looks great in Firefox.
    Do you have any ideas to help fix this issue?

  10. ps4 games
    ps4 games says:

    Howdy, i read your blog from time to time and i own a similar one and i was just wondering if
    you get a lot of spam remarks? If so how do you reduce it, any plugin or anything you
    can advise? I get so much lately it’s driving me crazy so
    any help is very much appreciated.

  11. coconut oil
    coconut oil says:

    I’ll right away take hold of your rss as I can’t
    find your e-mail subscription link or newsletter service.
    Do you’ve any? Kindly permit me realize in order that I may just subscribe.
    Thanks.

  12. coconut oil
    coconut oil says:

    Having read this I believed it was rather informative.
    I appreciate you spending some time and energy to
    put this information together. I once again find myself
    personally spending a lot of time both reading and commenting.
    But so what, it was still worthwhile!

  13. match.com free trial
    match.com free trial says:

    Hey there! I know this is kinda off topic but I was wondering which blog platform are you using for
    this site? I’m getting fed up of WordPress because I’ve had problems with hackers and I’m looking at options for
    another platform. I would be fantastic if you could point
    me in the direction of a good platform.

  14. https://russellwebster.tumblr.com/
    https://russellwebster.tumblr.com/ says:

    I’m extremely impressed with your writing skills as well as with the layout on your blog.
    Is this a paid theme or did you modify it yourself?
    Either way keep up the excellent quality writing, it is rare
    to see a nice blog like this one these days.

  15. tinyurl.com
    tinyurl.com says:

    A fascinating discussion is definitely worth comment.
    I believe that you ought to write more on this topic, it may not be a
    taboo subject but generally folks don’t
    talk about such subjects. To the next! Cheers!!

  16. espn.com/activate
    espn.com/activate says:

    Having read this I thought it was rather informative.
    I appreciate you finding the time and energy to
    put this article together. I once again find myself spending way too much time both reading and leaving comments.
    But so what, it was still worthwhile!

  17. sling tv
    sling tv says:

    You could definitely see your skills in the article you write.
    The world hopes for more passionate writers such as you who are not
    afraid to say how they believe. Always go after your heart.

  18. sling tv
    sling tv says:

    whoah this blog is great i love studying your posts.
    Keep up the great work! You recognize, lots of individuals are looking around for this info, you could help them
    greatly.

  19. sling tv
    sling tv says:

    Greetings from Florida! I’m bored to tears at work so
    I decided to check out your site on my iphone during lunch break.
    I love the info you present here and can’t wait to take a look when I get home.
    I’m amazed at how fast your blog loaded on my phone ..
    I’m not even using WIFI, just 3G .. Anyways, awesome
    blog!

  20. sling tv
    sling tv says:

    Appreciating the time and effort you put into your website and detailed information you offer.
    It’s good to come across a blog every once in a while
    that isn’t the same unwanted rehashed information. Fantastic read!
    I’ve saved your site and I’m adding your RSS feeds
    to my Google account.

  21. sling tv
    sling tv says:

    You really make it seem so easy with your presentation but
    I find this matter to be actually something which I think I would never understand.

    It seems too complicated and very broad for me. I’m looking forward
    for your next post, I will try to get the hang of it!

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published.