The info controller establishes the uses for which as well as signifies by which particular information is processed. Formally attest your compliance. An AOC (attestation of compliance) is the shape you employ to signal that you choose to’ve obtained PCI DSS compliance. Ending your questionnaire with no “Completely wrong” responses https://www.nathanlabsadvisory.com/blog/tag/security-culture/