A reminder that as from 1 January 2012 all Payment Card Industry Data Security Standard (PCI DSS) assessments must be against version 2.0 of the standard. "PCI DSS requirements must be implemented by all entities that process, store or transmit account data"
Now may be a good time to check your on-line and off-line systems.
https://www.pcisecuritystandards.org/merchants/index.php
http://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Security_Standard