With the August 2011 PCI Standards Council update, internal tokenization has clearly gained momentum as the lowest impact solution that large merchants can implement to achieve PCI compliance for stored cardholder data. However, not all tokenization solutions are created equal; many do not apply recommended network security or authentication controls. In this session, independent Payment Card Industry QSA (Qualified Security Assessor) expert Walter Conway gives insight directly from field engagements to illustrate best practices for solution selection and implementation.