In lieu of my normal advice to open support case, it depends on if the devices you're talking about are controllers, switches, or Instant APs.
If it's controllers, then you need to 1st check if AMP Setup -> General tab -> Device config box -> Use Global Aruba Configuration = yes/no. If it's no, then each controller type in the group should have it's own individual config. If it's yes, then if you go to group (that has controller) -> controller config -> you should be able to toggle off any undesired settings.
Also, since the topic is PCI compliance, please double check your AMP Setup -> PCI Compliance settings.