This paper addresses the suitability of the Oracle Virtual Computer Appliance for the secure hosting of applications, including the supporting network and systems infrastructure, in compliance with the Payment Card Industry Data Security Standard (PCI DSS) v3.0.