The PCI framework aims to protect sensitive cardholder information during transactions and prevent credit card fraud. Depending on the number of transactions per year a vendor handles, a formal third party audit may be necessary. If a formal audit is unnecessary, the other way a vendor may prove compliance is through a Self Assessment Questionnaire (SAQ).