Business Solution: After conduction a PCI assessment with the start of 750+ findings and would climb to several thousand findings, it made no sense to fix all the PCI issues identified.  A future enterprise environment was designed from the ground up incorporating not only IT Security, but significant network architecture enhancements that would become the future enterprise environment for the company.  All new firewalls, routers, switches were placed into a future environment that complied with all the PCI requirements and all PCI in-scope systems would become a part of the environment.  This would reduce the scope of thousands of systems and drove down the cost of the project by millions.  The new future environment leverage the benefits of virtualization, and segmented systems to limit PCI scope.  Many systems that were very old and did not make sense to upgrade the source code since the end-of-life made the ROI unfavorable.  Instead, Web Application Firewalls were placed in front of the applications to address the plethora of vulnerability issues, which in turn fixed PCI vulnerability scanning results and satisfied penetration testing.  The PCI in-scope systems needed to be carefully migrated into the new future environment during countless outage windows to slowly become PCI compliant.  Leveraged a strategy to make individual business units PCI compliant instead of waiting for the entire enterprise to become PCI compliant.  Client had over 35 different business units and it was quicker to show progress with the smaller business units while the main enterprise was being remediated.