PCI DSS is a set of standards that apply to any company with a Merchant ID (MID) that processes, stores, or transmits cardholder data.
The primary goal of PCI DSS is to protect cardholder data and reduce vulnerabilities. The consequences of non-compliance include reputational damage, legal action, loss of licence, payment card issuer and government fines.
That's why all employees need to understand what is expected of them and the duties they need to carry out to protect cardholder data.
