Poorly, had not checked Payment Card Industry Data Security Standards. In hindsight, this was a meaningless mistake as the 12 requirements of PCI-DSS are a small subset of the ISO 27001 Requirements.