PCI Security Standards Council Releases Supplemental Guidance for Protecting Telephone-based Payment Card Data