The RSI security blog site breaks down the ways in certain detail, but the process in essence goes such as this: Use solid cryptography when transmitting cardholder data throughout open, public networks. Both of these requirements make sure that you shield information each at relaxation As well as in movement. https://www.nathanlabsadvisory.com/blog/tag/dpias/