Even though the PCI SSC has no authorized authority to compel compliance, It's a requirement for any company that procedures credit rating or debit card transactions. The timeline for This might be a couple of weeks to a couple months according to how the means and funds is allotted to https://www.nathanlabsadvisory.com/blog/nathan/maximize-business-trust-and-security-with-hitrust-compliance/