The data controller establishes the purposes for which along with the suggests by which own data is processed. PCI compliance is split into four degrees, depending on the yearly amount of credit history or debit card transactions a company processes. The classification degree determines what an organization needs to do https://www.nathanlabsadvisory.com/nist-800-cyber-security-frame-work.html