The PCI Security Standards Council makes copies of the various Report of Compliance (ROC) reporting template available to download as a PDF in their Document Library. The direct link to download the version 4 ROC reporting template is: https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Reporting%20Template%20or%20Form/PCI-DSS-v4-0-ROC-Template-r1.pdf If you would prefer a copy of the template in Word format, ask your QSA. They…
Tag: reporting
Where can I download a PCI AOC template? [PCI v4 Update]
The PCI Security Standards Council makes copies of the various Attestation of Compliance (AOC) reporting templates for download as both PDFs and as editable Microsoft Word DOCX documents in their Document Library. Read on for help in choosing which of these forms to use. Which AOC template you will use depends on the type of assessment you’re going…
What are Service Provider Levels for PCI DSS?
For a general overview of how compliance levels operate in the PCI world, check my previous article on compliance levels for merchants. As with merchants, the PCI Security Standards Council doesn’t have anything to do with defining the service provider levels – that’s all handled by the individual card brands. Also as with merchants, there…
What are Merchant Levels for PCI compliance?
There are lots of sites which list PCI merchant compliance levels. They mostly make straightforward statements like “PCI requires merchants of transaction volumes over 6 million per year to be level 1”. This is a nice, simple approach. Unfortunately, it’s also wrong in a couple of different ways. PCI DSS doesn’t have any requirements to…
What is a PCI Compliance Certificate?
Working at MasterCard and Visa level 1 service providers, I’ve been asked for my “PCI Certificate” on a regular basis. But in the PCI DSS world, there is nothing called a PCI Certificate. So what’s really being requested? Ultimately, a PCI compliance certificate would be a piece of evidence showing that a company complies with…