As the saying goes, “if you don’t know where you’re going, you’re certainly not going to get where you need to be”. This is certainly applicable to the efforts of many security practitioners aligning their strategies and enterprise infrastructures to comply with PCI DSS (Payment Card Industry Data Security Standard). As outlined in this presentation, the payment industry is faced with an increase in data breaches. This highlights the need to maintain a robust data security standard that protects the consumer, and their personal data. Though PCI DSS compliance, stake-holders can create an environment that lends itself to a high benchmark in security best-practices, and minimizes the tendency of implementing reactionary solutions.