How can I help with PCI DSS?

Seeded with PCI DSS concepts: the Payment Card Industry Data Security Standard maintained by the PCI Security Standards Council for any entity that stores, processes, or transmits cardholder data, the cardholder data environment (CDE) and scoping, the 12 requirements grouped under six control objectives, merchant and service-provider validation levels, the Self-Assessment Questionnaire (SAQ) types, the Report on Compliance (ROC) and Attestation of Compliance (AOC), and the defined and customised approaches introduced in version 4.0.

• Work through defining and reducing your cardholder data environment (CDE) scope and identify where cardholder data is stored, processed, or transmitted.
• Figure out your merchant or service-provider level and which Self-Assessment Questionnaire (SAQ) type fits, and when a Qualified Security Assessor (QSA) and a Report on Compliance (ROC) are needed instead.
• Plan the 12 requirements across the six control objectives, understand the defined vs customised approach in version 4.0, and draft supporting policies and Attestation of Compliance (AOC) narratives.

It gives implementation guidance to speed up your work. It is not a Qualified Security Assessor, it cannot issue PCI DSS certification or attestation, and it is not legal advice.