The formation of the PCI Security Vendor Alliance is a positive step towards educating firms about the best practices of the Payment Card Industry data security standard (PCI DSS).