What is your experience related to the PCI (Payment Card Industry) Data Security Standard annual audit. We are starting to research having PCI as part of our annual audit process and I wanted to see if any of you had experience with PCI audits and any insights you might have. Here are the two specific questions I had:

- Do you have an internal person who assists or do you have it all outsourced to a 3rd party?
- If you do outsource to a 3rd party, do you have a vendor that you recommend?

We do outsource it as part of our internal audits. I do not think we can share vendors on the public forums, so please PM if you would like a recommendation.