Rank: Member
Joined: 11/11/2011(UTC)
Posts: 13
|
I have several sites with bvc_Audit tables that are over 10GB in size. Is it safe to clear this table periodically?
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 1,786
|
Yes, with the caveat that PCI compliance rules require to you to keep this data for up to 1 year. You can always make a database backup first, then clear the table and save the backup in case you need it for a PCI audit in the future.
|
|
|
|
|
|
Rank: Member
Joined: 11/11/2011(UTC)
Posts: 13
|
Thanks Marcus. I was under the impression that PCI compliance goes out the window if credit card numbers are stored in plaintext. Is this the case?
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 1,786
|
Depends... PCI rules say the merchant can keep the plain text card numbers for no longer than is needed. Who defines what "needed" is? Also, anytime you have customized a commercial product it is no longer covered or required to have PCI compliance as it is now the organization's responsibility to comply with PCI practices.
It's really a terrible specification designed to transfer risk from payment processors to merchants and charge said merchants for the privilege of accepting the new risk. You can probably tell I'm not a fan of PCI.
|
|
|
|
|
|
Rank: Member
Joined: 11/25/2003(UTC)
Posts: 370
|
I have yet to see an eCommerce site that is100% PCI compliant. |
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.