The Payment Card Industry Data Security Standards — or PCI DSS — cover any organization that directly accepts credit or debit card payments. Learn more about PCI DSS’s 12 key requirements in this quick overview; together they make up the kind of IT security policy that any company would be wise to implement.
http://www.youtube.com/watch?v=HiN93kp6Dgc
Getting a company who has not previously been using payment cards PCI compliant can be something of a headache. Once the processes are in place and functioning correctly, though, it doesn’t even need to be much more than an afterthought assuming all programs and tools are running correctly.