As Portion of PCI data security benchmarks, physical cardholder knowledge must also be stored in a very protected area, like a locked home or storage location with restricted accessibility. The storage period doesn’t feel proportionate to the purpose of finding work for anyone while in the limited to medium phrase. https://www.nathanlabsadvisory.com/blog/nathan/understanding-soc-2-a-guide-to-compliance-and-reporting/