Audit Timing

[K Heath]

We have heard from an unconfrmed source that all Level 1 merchants should have an audit completed by 30th June. However, I haven't been able to find anything in print confirming this. My understanding was that audit timeframes were driven by the card brands, through the acquiring banks and that audits would be staggered across the year.

Is there any deadline that has been imposed by a card brand on level 1 merchants ?

[admin]

I would contact the card brands/associations and acquiring banks for any deadlines. Presently, all merchants need to be compliant. Any "deadlines" are extension given based on the discretion of the responsible agent.

[K Heath]

I have received confirmation from one of the card brands that, though PCI compliance is mandatory now, they have imposed deadlines for compliance audits for level 1 merchants. These card band imposed deadlines are not consistent across the various card brands and may differ from region to region.

[admin]

This is correct. Remember that Visa and MasterCard work through acquiring banks, so you will always hear about their deadlines from your acquirer or gateway/processor.

As for American Express and Discover, merchants have a direct relationship with these card brands and will hear directly from them about any compliance deadlines. If you have not heard anything or don't know then be sure to ask about it. You can find contact email addresses here (http://pcianswers.com/2007/02/03/pci-cynics-should-ask-instead-of-complaining/).