The RSI security website breaks down the actions in some element, but the procedure in essence goes like this: Formally attest your compliance. An AOC (attestation of compliance) is the form you use to sign that you choose to’ve attained PCI DSS compliance. Ending your questionnaire without having “Completely wrong” https://www.nathanlabsadvisory.com/security-program-advisory.html