The Payment Card Industry (PCI) Data Security Standard (DSS) was written by the payment card industry to help merchants worldwide to better safeguard cardholder data. Its requirements apply to merchant environments and any third-party service providers where cardholder data is processed, stored, or transmitted. Merchants and service providers must comply with the PCI DSS standard. They are faced with purchasing and deploying computer and network security products that help them achieve and demonstrate compliance with PCI DSS requirements, or to develop and document appropriate compensating controls. Qualified Security Assessors (QSAs) likewise need assistance in understanding whether or not products in the cardholder data environment have the capacity to assist the merchant in achieving compliance with the PCI DSS. This report helps both merchants and QSAs by identifying where a specific product or family of products has the capability to satisfy or help to satisfy one or more of the individual PCI DSS requirements. Armed with this information, merchants and QSAs can better determine where additional products or compensatory controls may be required.