A Company Launched an E-Commerce Website with Multiple Points of Sale

A company launched an e-commerce website with multiple points of sale through internal and external e-stores. Customers access the stores from the public website, and employees access the stores from the intranet with an SSO. Which action is needed to comply with PCI standards for hardening the systems?

A) Mask PAN numbers
B) Encrypt personal data
C) Encrypt access
D) Mask sales details