Tightening the thumbscrews
VISA set a deadline for smaller companies for PCI compliance to yesterday in the US. Bigger dragons have until September 30th to comply. It is not an easy task to comply to the 230 (approximately) requirements in the PCI-DSS. Not for your local news dealer at the corner, nor for the huge department store downtown.
What if the energetic guy selling cigarettes and magazines since 40 years for your dad and you actually cannot understand or is not capable (moneywise or otherwise) of complying? Weird stuff in that self assessment document, strange words... Does this mean a lot of these smaller shops will disappear? Will there be any more local stores thanks to this? It is a sad thought. I love to get my papers and bread from a local dealer.
On the other hand what if they won't comply? The story tells that small businesses are a bigger target than the larger ones in hacking. Logical, since the smaller ones are probably not as aware of patching or updating, or firewalls or viruses or whatnot. Whereas the bigger companies have specialists for these kind of gadgets.
It is a Catch 22. And not a pleasant one.
What if the energetic guy selling cigarettes and magazines since 40 years for your dad and you actually cannot understand or is not capable (moneywise or otherwise) of complying? Weird stuff in that self assessment document, strange words... Does this mean a lot of these smaller shops will disappear? Will there be any more local stores thanks to this? It is a sad thought. I love to get my papers and bread from a local dealer.
On the other hand what if they won't comply? The story tells that small businesses are a bigger target than the larger ones in hacking. Logical, since the smaller ones are probably not as aware of patching or updating, or firewalls or viruses or whatnot. Whereas the bigger companies have specialists for these kind of gadgets.
It is a Catch 22. And not a pleasant one.
Comments
Post a Comment