Make a timeline and delegate duties (compliance automation software is likely to make this exercise significantly less time intensive) PCI compliance is split into four amounts, dependant on the yearly amount of credit score or debit card transactions a company processes. The classification stage determines what an company should do https://www.nathanlabsadvisory.com/blog/tag/nathan-labs-advisory/