As Element of PCI knowledge security expectations, Bodily cardholder knowledge must also be stored within a protected site, for instance a locked space or storage space with restricted entry. The distinction between the different types of SOC audits lies in the scope and duration in the evaluation: Compliance with PCI https://www.nathanlabsadvisory.com/source-code-review.html