https://garfield.in/2008/05/19/3-basic-factors-that-determine-pci-compliance-levels/