OPINION

PCI compliance means operational change, not a one-off technology implementation