The information controller decides the needs for which as well as means by which private info is processed. Dealing with the entry of bank card details from clients; namely, that sensitive card specifics are collected and transmitted securely The PCI SSC has outlined 12 necessities for handling cardholder facts and https://www.nathanlabsadvisory.com/fedramp.html