Why it matters
Card data is a target. A system that stores it or logs it carelessly costs the business its card acceptance, and costs cardholders their money. The PCI standards turn this into rules. Developers decide what their code stores and logs; testers check that it doesn't. This module gives the developer's view, not the full standards.