Despite its seemingly narrow focus on cardholder data protection, PCI-DSS spans most IT disciplines and skills. This includes networks, databases, web applications, file systems and encryption along with core security-related processes such as vulnerability and configuration management. As a result, the cost of implementing compliance has become alarmingly high.

By consolidating security functions, Unified Threat Management solutions offer the most cost effective means of meeting PCI-DSS requirements. This paper briefly describes the core IT disciplines of Fixed Networks, Wireless, IT Assets/Endpoints, Data & Databases and Web Applications and the key functions required in each category.