Live webinar March 10, 2010 - Register here to receive the On Demand Archive

For a standard that has only formally existed for less than 4 years, the Payment Card Industry Data Security Standard (PCI-DSS, or PCI) is making astonishingly rapid progress.

In the United States, 50% - 80% of large retail companies are validated as compliant; even second tier organizations are at the 50% mark in terms of adoption. In Europe, PCI is making headway as well, although adoption is not uniform across the continent, with the UK exhibiting the highest levels of PCI compliance and awareness.

PCI has attained such wide adoption that it is considered a de-facto best practice in the retail industry. Although a private industry rather than legal standard, it is treated in many organizations similarly to regulatory requirements, frequently creating an unnecessary additional burden on IT as a result. Today, based on well-established security best-practices, such as ISO17799, PCI is not a compliance program but rather a technical best-practices standard for the protection of sensitive data – and not just credit card data.

In this webcast, we will examine five strategic challenges facing an organization attempting to navigate the PCI compliance landscape, and how to turn these challenges into a strategic PCI approach:

• Lack of organizational understanding and commitment
• Treating PCI as an audit process
• Scoping compliance too broadly
• The fallacy of point-in-time compliance
• Failure to automate

We will also discuss issues pertaining to entire life-cycle of PCI compliance, including pre- and post-compliance challenges, with an eye towards clarifying certain common but crucial misunderstandings of the compliance process.