There are many ways you can end up non-compliant. Here are just a few: Not filling out your annual SAQ (Self-Assessment Questionnaire) Filling out your annual SAQ incompletely and/or inaccurately Failing to complete quarterly network audits Not taking recommended steps provided by PCI compliance experts Sharing login information or usernames among employees Using default passwords for any of your networks or equipment Using a public WiFi for some of your transactions if you have a network issue, or are off-site