The PCI Standard and the RevTrak Operating Procedures Guide require an Emergency Response Plan that handles credit card numbers in a manner that is equivalent to the FTC Identity Theft Prevention Program. The Emergency Response Plan is and will continue to be audited as part of the PCI Certification.
