How are you dealing with PCI Compliance and oneWorld Xe?

[Jotto]

I am curious if any of the other OneWorld Xe shops out there are in the middle of, or have recently completed, PCI compliance changes. What CNC software and/or hardware changes did you have to make? What were/are your biggest struggles?

 

[altquark]

Where I am currently has PCI compliance - specifically credit card processing. They managed this by creating a separate CC processing server that was a JDE App Server with a custom BSFN - and this ensured that the database wasn't in the loop, since the database wasn't storing CC details. The front-end servers (citrix) were therefore in the "PCI realm" together with this single Intel App Server.

 

[Jotto]

Do you know if they have to use two-factor authentication to access those Citrix Servers? Or have more information on what comprises the "PCI Realm?"