Certification is legitimate for five (5) years from the date the Original certification assessment is handed and is barely legitimate as soon as PCI has done the choice to concern the certification. E-commerce retailers who outsource all payment processing to PCI DSS validated 3rd parties, and that have a web https://www.nathanlabsadvisory.com/blog/nathan/secure-federal-contracts-with-fisma-compliance/