Help I am being charged for your non PCI Complicance

Can any one tell me of a hosting service that is PCI complicant I am being charged 150.00 month now because discountASP won't bring there network up to PCI complicance

 

Discountasp's network infracstruction is PCI compliant. Can you elaborate further on what made you believe that it is not PCI compliant?

 

PCI compliance goes far beyond the server or the network. PCI, HIPAA, etc. are all about data integrity, and a shared host cannot guarantee the integrity of their customer's data because the customers control that data.

In other words, a server (hardware) can comply with any number of security standards, but someone operating a site on that server can easily break that compliance intentionally or unintentionally.

This may be a dirty little secret, and the marketing guys will probably come over and hit me over the head with a frying pan for saying this, but it is next to impossible for a site on a shared hosting server to really, honestly be PCI compliant.

Can you pass the PCI compliance test? Sure. It's a self-assesment in most cases. Kind of like those "stated income" house loans they used to make where you could say you earned whatever amount was convenient in order to get he loan. Even if that amount was ridiculously false.

A host that advertises "PCI compliant" services is only telling a half-truth. The other half of compliance is all on the site operator, and very, very difficult to adhere to at a shared host (I would say impossible, but then someone would cite some esoteric example and prove me wrong).

 

The PCI Complicance company that we are being force to go through is going to also do a network scan on our site and if it doesn't pass we won't pass

 

Let us know the results of the test without divulging too much information.

 

If you aren't passing, it's likely due to SSL or "weak" encryption issues. If that's the case we can move you to a server that doesn't support the older version of SSL, and does not use encryption under 56 bit.

 

I will let you know. McAfee is in the process of doing a network scan now so I should know something more tomarrow

 

If it is SSL/encryption related, open a support ticket.