It's deadline day for Payment Card Industry Data Security Standard Section 6.6, which requires either the implementation of a web-application firewall or code review process. IBM compliance expert Marne Gordan discusses the new requirement and how merchants are coping with another rule.