The PCI Scope Trap

An ISV doesn’t have to store card data to have PCI responsibilities. If its software, integrations, access, vendors, or deployment processes can impact the security of cardholder data, it may already be operating as a service provider. In this episode, Kitty and Chris sit down with Steve Levinson of LHC Advisors to break down the PCI scope trap, the service-provider requirements many ISVs…