Chief technology officer and lead security standards architect for the PCI Security Standards Council spoke at the North American Community Meeting. He says security testing must be standardized and validated. Leach: “From a merchant perspective, there has to be a buyer-beware approach to any type of solution you are looking at today” He says point-to-point encryption could simplify PCI compliance for many merchants. The council is in the process of developing a guidance paper for tokenization, which is expected to be released by the fourth quarter of this year.”]
Source: https://www.govinfosecurity.com/setting-tokenization-standard-a-3173