New business relationships start here
RFI: Penetration Testing for PCI Compliance
Intent to bid: March 12, 2010
The scope of penetration testing is the cardholder data environment and all systems and networks connected to it. If network segmentation is in place such that the cardholder data environment is isolated from other systems, and such segmentation has been verified as part of the PCI DSS assessment, the scope of the penetration test can be limited to the cardholder data environment.
