A risk evaluation have to be executed to establish vulnerabilities and threats, use policies for important systems have to be developed and all personnel security obligations needs to be defined A 2012 circumstance involving Utah restaurateurs Stephen and Cissy McComb brought some of the murky earth of PCI DSS fines https://state.georgiatimeline.com/press-release/2024-09-02/10715/nathan-labs-expands-cyber-security-services-in-saudi-arabia