Which of the following actions is a best practice when storing payment card information?
Use password protected and innocently named spreadsheets, databases, or accounting software to store full cardholder data.
Only record and store security codes and PINs, but never the actual full card number.
Store full cardholder data on a removable storage device segmented from the rest of the network.
Use encryption to make the information unreadable to someone without the correct security code (or key).