keydet89, thanks for sharing how it really works. Although, now I'm starting to have less confidence in PCI. /
In my response I was trying to answer the original question. I'm not saying that the investigations (PII, PCI, PHI, etc) *aren't* done correctly…I'm responding that to the part about who verifies that this is the case.
In the 13+ years that I've done this work, there have been a handful of times where a customer has asked us to verify the work of another firm, or the customer has come to us to work previously done…they may have been shopping around for an answer.
In my response I was trying to answer the original question. I'm not saying that the investigations (PII, PCI, PHI, etc) *aren't* done correctly…I'm responding that to the part about who verifies that this is the case.
In the 13+ years that I've done this work, there have been a handful of times where a customer has asked us to verify the work of another firm, or the customer has come to us to work previously done…they may have been shopping around for an answer.
Ahh okay, thanks for clearing it up. )