In many countries, organizations that accept online payments are required to regularly undergo PCI DSS certification. Whether your company needs to be certified and how this is done is described in the pci compliant definition article. This information will be enough for you to find the answer to your question.