We used that for PCI compliance when I was working at Whole Foods. That only covers their part of the shared responsibility model. There’s still a whole boatlo

We used that for PCI compliance when I was working at Whole Foods. That only covers their part of the shared responsibility model. There’s still a whole boatload of things that still need to be covered which do not fall on their side of the shared responsibility model.