PCI DSS is based on proven security principals and rules. It enable to prevent CNP fraud, protect existing cardholder data. Also ensure the integrity and availability of your organization's information. All storage and transmission of cardholder data has to be encrypted. Therefore it is worthwhile checking all applications that process cardholder data. This includes any test data that may be used. Where applications do not store cardholder data in an encrypted format, project plan and remediation strategy.