Conversation and data: Talk the organization's policies and processes to all applicable stakeholders. The RSI security web site breaks down the steps in certain depth, but the process in essence goes similar to this: The PCI SSC has outlined twelve specifications for dealing with cardholder details and preserving a safe https://virtualcisoconsultingservicesuae.blogspot.com/