Problem: The Payment Card Industry Data Security Standard (PCI-DSS) is an international standard covering the protection of debit/credit card details used for payment transactions.
Give a short essay discussing how the use of a governance infrastructure could help an organization make appropriate decisions regarding the security of an implementation that needs to comply with PCI-DSS. Your answer should cover (i) what type of governance mechanisms/structures could be used, and (ii) how those mechanisms could help the organization make appropriate decisions regarding the PCI-DSS implementation.