Best time to perform PCI compliance activities