Next, you’ll look at your data flow diagrams, which are required. ... Remember, all system components in the cardholder data environment must be validated — and that includes any hosting provider, ...