This document summarizes a presentation about the Payment Card Industry Data Security Standard (PCI DSS). It describes what PCI DSS is, who it applies to, why it was created, tips for making compliance easier, and common myths about PCI DSS. The presentation encourages organizations to reduce their handling of card data, implement basic security practices required by the standard, and maintain ongoing compliance rather than viewing it as a one-time audit.

1. Don’t Fear PCI DSS! Even Though It Can Be Scary At Times July 16-17, 2009 Napa Valley Marriott July 16-17, 2009 Napa Valley Marriott Dr. Anton Chuvakin [email_address] Security Warrior Consulting

16. Q&A C O N F I D E N T I A L Thank You [email_address]