The info controller determines the uses for which plus the implies by which individual facts is processed. Substantial-quantity people will desire to safe the services of a QSA that is registered to function in regions in which you are working. The PCI SSC has outlined 12 needs for managing cardholder https://www.nathanlabsadvisory.com/aramco-cyber-security-compliance.html