Hats off to Sage for doing a great job communicating the PCI-DSS requirements well in advance of the July 2010 timeframe that they say these new rules will take affect. If you've missed the rules, here's what Sage has to say: PCI-DSS is a set of requirements for enhancing payment account data security. Its standards include requirements for security management, policies, procedures, network architecture, software design, and other measures created to protect customer account data. Developed by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International (the founders of the PCI Security Standards Council), PCI-DSS is designed to facilitate global adoption of consistent data security measures.
Sage has designed a set of web sites tailored to their different ERP users. You can access the link below (and you should). The information is very well done - and Sage looks to be way ahead of the curve in actively promoting this information to their customers.
Sage MAS 90 & MAS 200: http://www.sagemasinfo.com/M90PCI/ Sage MAS 500: http://www.sagemasinfo.com/M500PCI/ Sage Accpac: http://www.sageaccpacinfo.com/PCI/
I would encourage everyone to read these sites. If you're a VAR please direct your clients (or provide the information) to the appropriate site so they can review the information. This makes great newsletter or web site material -- and Sage have already done the work in getting it all neatly organized!
