Its the former. Laws cover payment info. Also, payment info is more valuable to steal, and more compact to transmit and easier to decode from the raw storage data.
Once you have any security in place, it's probably more complicated to NOT include your payment database in it. PCI auditer will actively inspect your payment database attack surface.
Comments
Its the former. Laws cover payment info. Also, payment info is more valuable to steal, and more compact to transmit and easier to decode from the raw storage data.
Once you have any security in place, it's probably more complicated to NOT include your payment database in it. PCI auditer will actively inspect your payment database attack surface.