The RSI security site breaks down the measures in a few detail, but the procedure in essence goes similar to this: This allows all businesses—from large corporations to startups and modest and medium enterprises, which can not contain the requisite security infrastructure and staff—to remain secured and PCI DSS compliant. https://www.nathanlabsadvisory.com/resource.html