Many organizations have been putting off virtualization projects precisely because they were uncertain on how to demonstrate compliance in a virtualized environment – even a well secured one.

Recently, the PCI DSS council published guidance on the use of virtualization within the cardholder environment to provide much needed clarification and advice to assessors and their customers, allowing environments to be assessed for compliance against the individual requirements of the Data Security Standard.

View this presentation transcript as principal security consultant at Dell SecureWorks, Gavin Weir:

• Discuss the main issues confronting organizations who wish to use virtualization technologies with their Cardholder Data Environment
• Summarize and clarify the recommendations from the PCI council
• Offers suggestions on how virtual environments should be configured to comply and improve upon the recommendations presented in the guidelines
• And more