A workflow tool to track PCI security gaps more easily