The correct approach to PCI compliance validation is to approach it as a three step process: assessment, remediation, and compliance. By approaching PCI compliance with a detailed readiness gap analysis, and remediation activities before any onsite assessment takes place, organizations mitigate the risk of failing an assessment and incurring steep costs of non-compliance." EMC Executive Quote "EMC Consulting and RSA are leaders in delivering programs that help customers build security strategies that meet regulatory and governance requirements," said Tom Roloff, Senior Vice President of EMC Consulting, EMC Corporation. "We understand that demonstrating and maintaining PCI compliance remains one of the broadest and most complex challenges faced by organizations today. By leveraging the expertise of RSA, EMC Consulting acts as a trusted security advisor, giving organizations the confidence they need to comply with regulations and also establish a foundation of broad data security best practices."