The RSI security site breaks down the ways in some detail, but the process in essence goes like this: The PCI Security Specifications Council was designed by these market players to be sure that transactions involving charge card numbers are protected as is possible. The Council lays down various security https://www.nathanlabsadvisory.com/blog/tag/iso-27001/