This a general information security policy meant to meet the EXACT requirements of the PCI-DSS. No more, no less, but still flexible for your organization.