David Haltinner asked what other ISC readers are doing in terms of looking for, complying with, auditing for, etc... PCI requirements.
Do any of you have stories about the costs, benefits, positives and/or negatives of working with this standard?

For those of you not familiar with it, here's a place to start reading:
http://usa.visa.com/business/accepting_visa/ops_risk_management/cisp_merchants.html