原帖由 ACC-HE 於 2008-12-3 14:11 發表 
Are you familiar with PCI DSS?
Do you audit software security? or hardware/network security? or both?
No, I don't have any experience in dealing with the PCI DSS.
Security risk assessment involves software, network and environment. Actually, it involves many areas.
Too bad that I need to review lots of source codes of different web applications, 睇到人都癲.  |