The RSI security website breaks down the actions in a few detail, but the method in essence goes similar to this: Managing the entry of credit card information from customers; particularly, that sensitive card aspects are collected and transmitted securely The PCI SSC has outlined twelve demands for handling cardholder https://www.nathanlabsadvisory.com/blog/nathan/achieving-soc-2-compliance-a-crucial-step-towards-data-security/