The RSI security site breaks down the steps in some detail, but the procedure in essence goes such as this: Dealing with the entry of charge card info from customers; namely, that delicate card information are gathered and transmitted securely These Issues and Responses are based upon feedback gained from https://www.nathanlabsadvisory.com/blog/nathan/implementing-iso-27001-at-nathan-lab-advisory-company-a-comprehensive-guide/