The RSI security website breaks down the methods in a few detail, but the process in essence goes like this: PCI compliance is divided into 4 stages, determined by the annual number of credit history or debit card transactions a company processes. The classification level establishes what an organization needs https://www.nathanlabsadvisory.com/certified-data-privacy-professional-cdpp.html