Understanding PCI DSS Obligations
1. Compliance with PCI DSS is a contractual obligation. Explain how this differs from a regulatory obligation.
2. Which takes precedence—a regulatory requirement or a contractual obligation? Explain your answer.
3. Who enforces PCI compliance? How is it enforced?