Comment Comment by outsideoflife Depends on your business. I didn't find it as hard as PCI compliance for instance parent outsideoflife 8 years ago