Create a tokenizer service and store only tokenized data

Create separate projects that only process credit card data

Create separate subnetworks and isolate the components that process credit card data

Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data

Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor