When retailers sign a contract with a payment processor, they comply with be issue to fines if they fail to take care of PCI DSS compliance. PCI DSS compliance is the process of adhering to your list of controls and benchmarks for securing physical and on the net monetary transactions. https://www.nathanlabsadvisory.com/blog/nathan/secure-federal-contracts-with-fisma-compliance/