Before you do any testing for PCI you need to ensure that the scope of the testing meets the PCI standard. Risk Factory has compiled a simple checklist of things to include in your testing.