It is the Card Issuers responsibility to make sure that their card manufacturer meets Saudi Central Bank and the Card Association’s standards. A manufacturer must therefore make sure that they keep Cardholder data and cards in a secure environment. Card Issuers must meet and maintain adequate levels of security when they store, process and transmit Cardholder data, in accordance with Card Association rules as a minimum and with Saudi Central Bank circulars as a mandatory obligation.