We felt like the echos just kept getting louder in the book. You don’t have to secure what you don’t store, which means your scope is reduced with a solid truncation strategy. In fact, truncation is the next best thing to secure destruction when it comes to scope reduction and PCI DSS.

When Branden worked for a large bank, this was the strategy he chose to employ in the areas subject to PCI DSS. In...