It is an established set of policies and procedures accepted by organisations that involve processing, transmitting, and storing credit card information.