Co-sponsored by Catbird and VigiTrust, this paper addresses overcoming the challenges of scoping for Cardholder Data, including scope management, assessment preparation, continuous compliance considerations, operation impacts and do's and don'ts of virtualization security.