1/8 Now that the poll has closed, I'd like to disclose that I'm with the minority (No) on this one. Rationale summarized in this thread ๐Ÿ‘‡ #pci #training #appsec #swsec cc: @shehackspurple @bilcorry @robertauger @cigitalgem
๐‹๐š๐ค๐ฌ๐ก ๐‘๐š๐ ๐ก๐š๐ฏ๐š๐ง
 @laraghavan
31 Mar 2021
Do devs need to be trained โ€œaboutโ€ PCI compliance?
3
1
1
4
Replying to @laraghavan @shehackspurple @robertauger @cigitalgem
I agree. If the policies, processes, and tooling make compliance invisible, there isn't much to say other than follow/use/audit the policies, processes, and tooling to remain PCI compliant.

Apr 7, 2021 ยท 7:12 PM UTC

1
1
5
Replying to @bilcorry @laraghavan @shehackspurple @robertauger
Exactly. Build compliance in as a side effect. I recall that @abedra had to do this once...
1
4