On Sun, May 27, 2012 at 11:25 PM, Eero Volotinen <eero.volotinen at iki.fi> wrote: > ... snip .. > Just remember that PCI DSS is not self service process, you usually > need to use PCI QSA (Qualified Security Assessor) to complete your PCI > process. Yes, indeed. I am very well aware of it. In the OP I do mention "The PCI/DSS auditor has stipulated that the web ..." -- Arun Khan