Compliance with PCI DSS is not simple. Carrying out a preliminary assessment alone takes the average company more than a week, according to the Vanson Bourne survey. Nonetheless, through each of the three versions of the standard, the PCI has maintained a list of 12 unchanged objectives that provide an insight into its core principles.