If you deal with security and especially credit cards it’s worth spending an hour or two to read the 2014 Data Breach Investigation Report and the 2014 PCI Compliance Report. Lots of interesting stuff in them. The PCI report in particular calls out some of the changes in DSS v3 – I promise some of them will cause you work, it not pain!