PCI DSS Compliance and the Importance of Penetration Testing