With the deadline for PCI DSS 4.0 compliance just around the corner, it’s decision time for organizations. For many, compensating controls are a godsend, introducing a degree of flexibility into what is otherwise a rigorous, demanding and heavily detailed standard. But while this approach can be a useful means of temporarily meeting PCI DSS 4.0 requirements when technical or business constraints get in the way, it can be burdensome in the long term.

*** This is a Security Bloggers Network syndicated blog from comforte Blog authored by Mirza Salihagic. Read the original post at: https://insights.comforte.com/moving-past-compensating-controls-the-long-term-value-of-tokenization-for-pci-dss