Does your client or any of their business units: Accept credit cards as a form of payment? Build software for the processing of credit cards? Allow customers to swipe credit cards? Accept payments online? Process payments on behalf of others or involved in the processing of credit cards?

If you answered "yes" to any of the above questions, then the PCI DSS applies to you!