The simple truth is that it is entirely possible to compromise a fully PCI compliant network, and this session will show you how. This talk will present research across several hundred organizations and demonstrate how to compromise a network that complies with PCI DSS to the letter, due to otherwise poor information security practices.