Despite the release of a white paper entitled ‘PCI compliance for dummies’, New Zealand is on track regarding PCI compliance, says expert Francois Marais of RSA.“I don’t believe there is a lack of knowledge around PCI,” he says. “However there is definitely the question around creating a cost effective business driver around PCI frameworks.”Marais also believes the “majority of corporations” that need to comply with PCI have current strategies in place to conduct and enforce PCI requirements.But the issue stretches beyond the CIO, as PCI compliance is something the whole company needs to take seriously, he says.“PCI is a business concern and stretches way beyond the CIO as the loss of credit card data affects the ‘brand’ of the corporation.”