Placeholder for the Drupal PCI compliance white paper (http://drupalpcicompliance.org), which will be maintained here.