Once again, Understand that these aren’t “fines” in the same perception that, say, you’d purchase violating some govt regulation or website traffic law; they’re penalties developed into a contract between retailers, payment processors, and card brand names. PCI DSS compliance is the process of adhering into a set of controls https://www.nathanlabsadvisory.com/blog/tag/iso-27001/