Unfortunately, as previously stated, the answer is "No"
To achieve full PCI compliance you need to fulfill many, very specific, requirements.
Full list can be found here:
Some of these requirements deal with the way you manage your servers, other talk about internal role distribution and so on...
For example section 9.1.1 states:
"Use video cameras and/or access control mechanisms to monitor individual physical access to sensitive areas. Review collected data and correlate with other entries. Store for at least three months, unless otherwise
restricted by law." [this obviously talks about serves access]
I`m choose to focus on this section to show that PCI complicancy is not a "purely technical" issue.
Having said that, on a technical site, you probably will want to take notice of section 6.6 that calls for one of the following :
- Reviewing public-facing web applications via manual or automated
application vulnerability security assessment tools or methods, at
least annually and after any change.
- Installing a web-application-firewall in front of public-facing web applications.
This is probably the most demanding section in the whole bill as it requires you to either have a WAF in place or to perform routine checks after (and this is important) EVERY CHANGE made to your web applications.
In other words - pure nightmare...
This section is what drives many SMB website owners away from PCI DDS, and into an arms of a 3rd party billing providers, as the setup and maintenance costs are simply just too high. (WAF will cost thousands of dollars,even before maintenance costs, and routine checks after every change are not an option, and even if it is - it comes with an even greater accumulative cost)
Recently a affordable solution to this issue was made available via Cloud-based PCI compliant WAF.
The idea here is that of "shared-usage" and "economy of scale". In this scenario, WAF protection is distributed via Cloud to a community of users (websites) and each member community gets full WAF features and updates but needs to pays only a fraction of the full price.
This cuts heavily on initial setup/purchase costs and also eliminates all additional maintenance costs (as a centered security team operates and updates the WAF for all Cloud users.)
Also this provides full standardization and promises a very high upkeep quality (very important in an ever-changing security landscape but not achievable without a dedicated security person/team)
(disclaimer - I work for the company which provides this solution)