Technical and conceptual PCI DSS security audit of a banking solution