The RSI Security blog site breaks down the ways in some detail, but the method in essence goes such as this: Formally attest your compliance. An AOC (attestation of compliance) is the form you use to sign that you simply’ve attained PCI DSS compliance. Finishing your questionnaire without having “wrong” https://www.nathanlabsadvisory.com/sox.html