What access control measures do I need to consider when making an application to become registered as an Account Information Service Provider (AISP)?

There are a range of obligations and the application will need to address how the business will impose controls around sensitive payment data flows, access rights, monitoring tools, and sensitive data storage amongst other things.