Entity defines a charter for a PCI DSS compliance program and communication to executive management