As Component Of PCI details security requirements, Actual physical cardholder data have to even be stored in a very secure place, for instance a locked home or storage space with restricted accessibility. Formally attest your compliance. An AOC (attestation of compliance) is the form you employ to sign you’ve attained https://www.nathanlabsadvisory.com/blog/nathan/understanding-the-sama-cybersecurity-framework-requirements-and-implementation/