Why Most Call Centres Are PCI SAQ D When They Don't Have To Be

If you take card payments over the phone, you're almost certainly classified as SAQ D. This designation requires over 300 controls covering all 12 PCI DSS requirements, including quarterly external sc