The information controller establishes the uses for which and the implies by which private data is processed. Use powerful cryptography when transmitting cardholder info across open up, general public networks. Both of these requirements ensure that you secure information the two at rest As well as in movement. It's relevant https://www.nathanlabsadvisory.com/blog/tag/security-awareness/