PCI SSCPCI DSSCompliance ReportingEASYFree question
What is an AOC in PCI DSS?
- A.Assessment of Controls-a scan summary that an ASV signs after testing external addresses and confirming each finding is closed
- B.Authorization of Compliance-a letter the acquiring bank sends to approve a merchant's processing volume and its chargeback ratio thresholds
- C.Attestation of Compliance-a formal declaration that an organization has been assessed and found compliant with PCI DSS
- D.Acknowledgment of Controls-a checklist that the QSA fills in during fieldwork and returns to the merchant before the ROC is drafted
Why C is correct
An AOC (Attestation of Compliance) is a formal attestation document signed by the entity and (if applicable) the QSA, confirming the results of the PCI DSS assessment and the entity's compliance status.
Know someone studying for PCI DSS? Send them this one.