PCI SSCPCI DSSCompliance ReportingEASYFree question
What does ROC stand for in PCI DSS reporting?
- A.Report on Compliance-a detailed report documenting the results of a PCI DSS assessment conducted by a QSA
- B.Record of Compliance-a short certificate that the acquiring bank issues to a merchant after reviewing its SAQ responses
- C.Review of Controls-a worksheet where a merchant lists the compensating controls it used in place of a requirement
- D.Return on Compliance-a metric comparing a merchant's security spend with its card fraud losses
Why A is correct
A ROC (Report on Compliance) is the detailed assessment report produced by a QSA documenting the organization's compliance status for each PCI DSS requirement, including testing procedures and findings.
Know someone studying for PCI DSS? Send them this one.