@jasonkleewein   DO NOT USE SECURITY METRICS!!!  They are a HORRIBLE company to deal with.  They are bullies and disrespectful.  They are also WASY overpriced.  

You can use ANY company you choose for PCI compliance.  As an example, we use the company that we do our credit card processing through.  But I know there are a LOT of others that are cheaper and easier to work with.