Requirement 1: Install and maintain a firewall configuration to protect cardholder data.
Security is something you do continuously and diligently; not something you check off on a "to do" list and then sit back and relax.
The Payment Card Industry Data Security Standard version 3.0 is now the de facto standard for measuring security programs for all merchants and service providers that participate in commerce using credit or debit cards.
If there is one thing I hate about driving and openly avoid, it is the left turn. Having been in two major car accidents, both of which included left turn scenarios (neither of them my fault), I have good reason to feel the way I do. It turns out there are many others that agree with me.
All of the changes fall under the category of "clarification" where the Council attempted to provide more complete explanations of the intent or spirit of the requirements, particularly with regard to key management.