Can PCI audits be done remotely