If your application requires your shoppers to enter their info on their own individual equipment, Then you certainly qualify for SAQ A. Features a new illustrative report that may be utilised when executing and reporting on the SOC 2+ evaluation. If your enterprise product demands you to handle card details, https://www.nathanlabsadvisory.com/rbi-cyber-security-framework.html