The RSI security website breaks down the ways in certain depth, but the method in essence goes such as this: PCI DSS compliance is the entire process of adhering to the list of controls and expectations for securing Bodily and online economic transactions. The PCI SSC has outlined 12 prerequisites https://www.nathanlabsadvisory.com/blog/nathan/is-a-virtual-ciso-right-for-your-business-evaluating-cost-effective-cybersecurity-solutions/