A risk assessment must be carried out to detect vulnerabilities and threats, use policies for crucial systems should be developed and all personnel security responsibilities have to be defined A 2012 case involving Utah restaurateurs Stephen and Cissy McComb brought some of the murky entire world of PCI DSS fines https://www.iowahighlights.com/nathan-labs-expands-cyber-security-services-in-saudi-arabia