As A part of PCI knowledge security specifications, Actual physical cardholder info should also be saved in a secure site, such as a locked space or storage area with restricted accessibility. Go with a compliance automation software Instrument to save time and cost. Professional idea- find a licensed CPA business https://www.nathanlabsadvisory.com/security-program-advisory.html