While the PCI SSC has no authorized authority to compel compliance, It's a need for almost any company that processes credit history or debit card transactions. It is the Accredited particular person’s sole obligation to keep up their certification. This includes but just isn't restricted to: continuing training, related work https://www.nathanlabsadvisory.com/blog/nathan/secure-federal-contracts-with-fisma-compliance/