If your organization accepts, stores or transmits cardholder data (CHD), it must comply with the PCI DSS standard. This requires annual validation/proof by most merchant processors and is a way of demonstrating that your environment is secure. Based on the number of card transactions you complete annually, you’ll need a self-assessment questionnaire OR an independent onsite audit. As standards and requirements evolve, maintaining compliance and performing assessments can become a yearly struggle.