PCI compliance used as blueprint for IT security