Putting In malicious software created to breach brick-and-mortar POS hardware and software and collect card data during transactions Includes a new illustrative report Which might be made use of when executing and reporting with a SOC 2+ assessment. A SOC 2 evaluation is a report on controls at a service https://www.nathanlabsadvisory.com/blog/tag/information-security-policy/