ative, Internet and cloud service providers, online storage firms, call centers and other companies that offer services to retailers must show they have the security controls needed to protect any cardholder data they handle.Starting next July, merchants that want to remain compliant with PCI requirements will be required to obtain a written assurance from each of their service providers attesting