“They’ll say, ‘we found data on the most obscure parts of our network, we had no idea it was there,'” Russo says. “We need some methodology to find cardholder data.” Recommendations for that will include data-loss prevention technologies or discovery tools to find cardholder data, Russo says.

via Revisions to credit card security standard on the way.