Is your organization PCI compliant?

We’d like to hear from nonprofits and associations that are in the process of tackling PCI compliance for their organizations.

• Is anyone fully compliant yet? Working on it? Not thinking about it at all?
• Within what timeframe do you anticipate becoming fully compliant?
• What have been the main challenges, and how has your organization had to change (internal structure, training, technology, etc) in order to achieve compliance?
• Are there particular nuances of the nonprofit and association sector that make it more difficult to push through on an initiative like this?