Introduction

Congratulations, you passed! Depending on where you were when you started, you may have worked long and hard to get here. So now you can kick back, relax, and wait until your next annual audit, right? It would be great if it were that easy, but unfortunately it s not. Security (and Payment Card Industry [PCI] compliance in particular) requires constant maintenance. In this chapter we will discuss how you can best spend your time now to ensure compliance in the future. First, we will discuss why you should think about security as a process instead of an event. We will then make suggestions on periodic review and training that should be happening in your organization. Last, we will outline some suggestions on performing a self-audit on your own network.