Step 1: Determine your PCI level. Step 2: Complete a self-assessment questionnaire or have a QSA evaluate you. Step 3: Build and strengthen an IT security program with Scrut Automation to protect cardholder personal data and meet the guidelines specified in the PCI control objectives. STEP 4: Apply for a formal report with the PCI Security Standards Council