As A part of PCI information security requirements, Actual physical cardholder knowledge need to even be stored inside of a secure site, such as a locked space or storage region with restricted entry. Your organization is service provider based exterior the EU. It offers services to consumers outside the house https://www.nathanlabsadvisory.com/blog/nathan/navigating-the-seas-of-cybersecurity-a-guide-to-complying-with-monetary-authority-of-singapore-mas-cyber-hygiene-guidelines/