As part of its Cardholder Information Security Program (CISP), the credit card
company Visa USA developed a set of Payment Application Best Practices
(PABP) [319] to assist the software vendors of payment applications in
developing those applications to support their users’ (i.e., merchants and