The Compliance Trap: Best Practices For Protecting Cardholder Data

The Payment Card Industry (PCI) Data Security Standard (DSS) has been evolving for many years and will continue to be enhanced to address new security threats and protection measures.

With the increasing maturity of the DSS, many security auditors are beginning to press companies that accept payment cards to demonstrate more than just "forward progress" toward compliance, or at least a smaller number of compensating controls. In fact, many retailers that have recently completed security audits are scrambling to implement new measures as their auditors have begun to insist on full compliance with key areas of the DSS.