Should your application requires your customers to enter their information on their own units, Then you certainly qualify for SAQ A. Formally attest your compliance. An AOC (attestation of compliance) is the shape you use to signal that you simply’ve realized PCI DSS compliance. Finishing your questionnaire without any “Mistaken” https://www.nathanlabsadvisory.com/copyright-certified-information-system-security-professional.html