[PCI DSS 1.x] 12.10.3 Ensure the entity is PCI DSS compliant

[READ-ONLY] Archives [RETIRED] PCI DSS v.1.x Questions and Answers Maintain an Information Security Policy
1

12.10.3 Verify that procedures ensure that the entity is PCI DSS compliant

2

VPN only, not SSL - OK?

[FONT=Verdana]Help! Would like to validate if secure transmission between a PCI-compliant network and an external entity that will be implemented between the 2 firewalls only (e.g. VPN only, no SSL) would already be sufficient to comply with PCI DSS? thank you![/FONT]