Moving Past Compensating Controls: The Long-Term Value of Tokenization for PCI DSS
With the deadline for PCI DSS 4.0 compliance just around the corner, it’s decision time for organizations. For many, compensating controls are a godsend, introducing a degree of flexibility into what is otherwise a rigorous, demanding and heavily detailed standard. But while this approach can be a useful means of temporarily meeting PCI DSS 4.0 requirements when technical or business constraints get in the way, it can be burdensome in the long term.