It is the Card Issuers responsibility to make sure that their card manufacturer meets SAMA and the Card Association’s standards. A manufacturer must therefore make sure that they keep Cardholder data and cards in a secure environment. Card Issuers must meet and maintain adequate levels of security when they store, process and transmit Cardholder data, in accordance with Card Association rules as a minimum and with SAMA circulars as a mandatory obligation.