iExpense - How do companies using Oracle Internet Expense 11i address PCI concerns for their interna

Just because you have a company owned corporate card does not absolve that company from PCI compliance issues with the various credit card agencies simply because they're willing to take on the liability if someone comprimises their DB and steals credit card info (please refer to the article at the bottom of this question).

We are thinking about implementing Oracle iExpense OIE.K for 11i.  However, the place where the financials information containing the corporate card data might not be up to full PCI standards.  Short of encrypting the entire Oracle Financials Suite, we have to come up with some sort of solution, should we use iExpense, so that our corporate card information within the iExpense system would meet the stringent PCI standards.