(from Practical eCommerce magazine)
I encourage Business to Consumer eCommerce companies to read and be familiar with the security requirements of the Payment Card industry. Processes extend beyond the outsourced payment gateway, into the merchant company, and the associated controls should be there.
Xtuple authorized consultant
Xero Certified advisor