This forum is focused on issues related to payment processors, banks and ISOs. Topics include payment outsourcing, interchange rates, fees and fines and the relationship between acquirers and merchants.

This forum is focused on helping merchants evaluate the various security technology hardware, software and services vendors. This forum may include marketing messages from the vendors, references to white papers and other materials related to PCI.

This forum is where merchants and technology vendors can open dialog with QSAs and other PCI consultants regarding the interpretation of PCI standards. This is also the place to find discussion of the PCI DSS 1.2 standard.

This forum focuses on PCI issues and best practices at colleges and universities. Issues include the process of managing payment gateways, helping campus merchants become compliant and outsourcing payment processing.

There is a lot of controversy about whether server virtualization and other forms of virtualization are "allowed" by PCI DSS, because of std 2.2.1's "only one primary function per server" restriction. This is a forum to discuss the technology and the compliance issues which it created.

This forum focuses on PCI issues and best practices of retailers. Issues include the National Retail Federation's PCI Best Practices research program, which the PCI Knowledge Base is helping conduct.

Many organizations are considering outsourcing payments processing and other aspects of security in order to reduce their PCI compliance cost and management burden. This forum is the place to discuss the technical and management issues associated with this outsourcing decision and compare notes with your peers.

This is the place to discuss PCI issues faced by service providers that handle card data or other confidential data for their customers. Issues include the relationship between the BITS requirements in financial services vs PCI, and due diligence evaluation of service provider security.

This forum is focused on experiences issues related to application security, specifically the best way to meet the PCI DSS 6.6 standard for Web applications using external code reviews vs application firewalls.

This is a forum for those organizations who are interested in tools and services to substitute risky credit card data for other numbers (or tokens) which can be used in place of card numbers for application processing, while reducing the risk and cost of compliance by having little or no stored credit card data.