ColdFusion PCI-DSS Scope Reduction: Isolating Cardholder Data in CFML Applications

Introduction
There is a particular kind of meeting that happens in ColdFusion shops every year or two. Someone from finance asks why the PCI assessment costs what it costs, and someone from engineering explains that the checkout page posts card numbers to a CFML template, which means the web server, the application server, the database, the logging, the backup system and anything on the same network segment are all in scope.
Read More