Among other measures, Marriott is Payment Card Industry (PCI) compliant where required and maintains a documented vulnerability management program, endpoint monitoring, and alerting capabilities, along with an up-to-date global incident response plan.