Many businesses opening eCommerce sites are small companies or startups with limited information technology (IT) knowledge or resources. Regardless of their size or level of expertise, they are required to comply with PCI-DSS. Due to the extent of these requirements, complying with the rules can be a very challenging objective.