-
Good Day all, I have been tasked with creating a organization wide unified document retention policy and program. I have been reading why too much about this topic, but all is good. Does any one have a good plan for tackling this issue and laws, regulations and rulings that I should consult while developing...
-
Christian. Any company that stores credit card data would need to be PCI-compliant. Likewise, if like you say, they have a form on their site that passes along credit card data, they would need some kind of secure transmission channel (e.g., SSL), but there is a lot more to it. If you're subject...
-
Yes, that would be us.
-
You're getting good advice on this thread, Mary, and I hope it's helpful. With SOX, you have to be a publicly-traded company. If you're private, you're not subject to SOX (although it's not a bad idea to go ahead and put together the documentation). I know you didn't ask about...