<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Only a fool would let the fox guard the hen house...YES, there most
certainly needs to be third party oversight. Just like the SEC watches
the stock market, <b><i>AND</i></b> with similar powers of enforcement.<br>
<br>
<br>
<br>
Kehoe, Matt wrote:
<blockquote
cite="midA0EE3112258E6F4989EF057FE76477520F78ECC8@EXCHANGE.sephoraus.com"
type="cite">
<pre wrap="">Having just gone through this, the biggest gotcha is that tier 1
retailers need a "3rd party assessment" which means you cant just
execute compliance from within....
PCI standards still leave much to be desired, but it's a good step
forward for retailing in general...
-----Original Message-----
From: <a class="moz-txt-link-abbreviated" href="mailto:dataloss-bounces@attrition.org">dataloss-bounces@attrition.org</a>
[<a class="moz-txt-link-freetext" href="mailto:dataloss-bounces@attrition.org">mailto:dataloss-bounces@attrition.org</a>] On Behalf Of Al Mac
Sent: Tuesday, May 08, 2007 8:48 AM
To: Data Loss Incidents
Subject: [Dataloss] OT? PCI Education Steak & Shake
</pre>
</blockquote>
</body>
</html>