Create a timeline and delegate jobs (compliance automation software could make this activity much less time consuming) The PCI Security Expectations Council was made by these marketplace players to make sure that transactions involving credit card quantities are safe as you possibly can. The Council lays down several security standards https://www.nathanlabsadvisory.com/blog/nathan/addressing-the-global-cybersecurity-talent-shortage-how-nathan-labs-advisory-can-help/