There are different compliance standards for different types of companies. PCI-DSS, PA-DSS, PTS,ASV, and a couple of others. It's determined by what it is you

There are different compliance standards for different types of companies. PCI-DSS, PA-DSS, PTS,ASV, and a couple of others. It's determined by what it is you do with the data. For instance, my company has software that deals with CC info (PA-DSS), hardware that does (PTS), and we store customer CC data (PCI-DSS). Make no mistake, PCI compliance is not easy and you have to take it seriously.