The RSI security blog breaks down the actions in certain element, but the method in essence goes such as this: Managing the entry of charge card information from prospects; particularly, that sensitive card details are collected and transmitted securely The PCI SSC has outlined 12 necessities for managing cardholder info https://www.nathanlabsadvisory.com/supply-chain-security.html