The Retailer's Guide to Becoming and Remaining PCI Compliant

Visibility and Distinguishability
In order to control the cost and administrative load of the compliance process, there's much value derived by spending time to adequately scope or segment the parts of the infrastructure that have PCI relevance. This exercise helps to prioritize the approach to compliance as well as identify the critical systems and data that require focus. Assets can be prioritized by data criticality through segmentation, helping administrators avoid the increased complexity of the compliance metrics for which the in-scope data is held.