PCI Scope and Virtualization

A strange statement popped out at me in an article called Top 10 PCI Compliance Mistakes. "PCI DSS 2.0 mandates that even if one VM deals with cardholder data, your entire virtual infrastructure must comply with the standard. The challenge is — the wording in PCI DSS on virtualization is vague and it all depends on [...]

[[ This is a summary only. Read more at flyingpenguin.com ]]