Six Ways to Reduce PCI DSS Audit Scope by Tokenizing Cardholder data

Enterprises are seeking ways to simplify and reduce the scope of the Payment Card industry's data security standard (PCi dss) compliance by shrinking the footprint where cardholder data is located throughout their organization. By reducing the scope, these enterprises can dramatically lower the cost and anxiety of PCi dss compliance and significantly increase the chance of audit success. Compliance with the PCi dss is a combination of documented best practices and technology solutions that protect cardholder data across the enterprise. This paper explores the use of tokenization as a best practice in improving the security of credit card transactions, while at the same time minimizing the cost and complexity of PCi dss compliance by reducing audit scope.