The Payment Card Industry (PCI) Data Security Standard (DSS) offers some flexibility in only a few areas, the most critical being Requirement 6.6. Requirement 6.6 states that all web applications must be protected by an application-layer firewall (also known as a web application firewall) or undergo a code review by an organization that specializes in application security.

This paper discusses everything you need to know about selecting the right solution to adhere to Requirement 6.6. Including:

• Limitations of code reviews
  
• Problems with substituting a vulnerability scan for a code review
  
• Benefits of Web Application Firewalls

Read this paper to learn what the most immediate and beneficial road to PCI DSS compliance is while mitigating your security risk and growing your business.