An information security professional, Harley, has been working with the software developers on a new Software as a Service (SaaS) offering. The system will process credit cards on a repeated basis for their customers. Compliance with the Payment Card Industry Data Security Standard (PCI DSS) is a requirement. They want to minimize their potential exposure to a data breach. Which of the following can help to minimize their exposure?