PCI 2.0: What’s New? What Matters? What’s Left?

This white paper from SANS, written by analyst David Hoelzer, reviews the new PCI DSS 2.0 requirements published in October 2010. It discusses what's new and what still needs more attention in the PCI DSS, including gaps in storage encryption, wireless networking and other issues. It analyzes the impact and implications of the new language on virtualized IT environments in PCI 2.0 and on centralized logging in the Payment Application Data Security Standard (PA–DSS).

This report will help you better understand the significance of the changes in PCI 2.0 and offers recommendations on how best to meet the PCI compliance requirements.