There are two unique aspects of PCI compliance, as compared with more common frameworks. First, scope is driven by cardholder data, which can be tokenized. Reducing scope is the number one goal, as it limits risk and total cost. Second, some newer technologies have been more challenging to understand in a PCI context, including cloud computing. Coalfire pioneered, and is the industry leader in, applying cloud to PCI as a result of our work with leading cloud service providers.