Create a timeline and delegate jobs (compliance automation software will make this action much less time consuming) PCI compliance is split into 4 degrees, dependant on the yearly variety of credit or debit card transactions a company procedures. The classification level establishes what an company should do to remain compliant. https://www.nathanlabsadvisory.com/blog/tag/governance/