I know that poll is not reality (well, reality is reality! :-)), but I am kinda curious what people think about the PCI compliance percentages across the board. After all, maybe perception IS reality :-)
In your opinion, how many organization who passed either a QSA assessment or SAQ self-assessment are actually compliant with ALL PCI DSS requirements 1 (one) month after the assessment? Please make no assumptions about whether they were compliant at validation time...
11% (1) | More than 90% of Level1 are compliant | |
---|---|---|
11% (1) | More than 50% of L1 are compliant | |
44% (4) | Less than 50% of L1 are compliant | |
11% (1) | None of the L1 are compliant | |
11% (1) | More than 90% of L2-L4 are compliant (SAQ) | |
0% (0) | More than 50% of L2-L4 are compliant (SAQ) | |
22% (2) | Less than 50% of L2-L4 are compliant (SAQ) | |
33% (3) | None of the L2-L4 are compliant (SAQ) | |
22% (2) | None are compliant even at the time of assessment! |
9 voters have answered this question.
This poll was created on 2010-02-08 18:49:42
by Anton_Chuvakin