AOC stands for which PCI DSS attestation form?

AOC stands for which PCI DSS attestation form?

• A. Attestation of Certification
• B. Assessment of Compliance
• C. Attestation of Compliance
• D. Audit of Compliance

Answer: (C)

Attestation of Compliance is the formal document used in PCI DSS to declare that an entity has met the required security controls. It serves as the official attestation that the validated scope and controls meet PCI DSS requirements, referencing the PCI DSS version, the environment scope, validation date, and whether validation was via a Self-Assessment Questionnaire (SAQ) or a Report on Compliance (ROC). The form is signed by the entity being validated (and, when applicable, by the QSA). The other terms describe different concepts or forms that aren’t the standard PCI DSS attestation form.

Attestation of Compliance is the formal document used in PCI DSS to declare that an entity has met the required security controls. It serves as the official attestation that the validated scope and controls meet PCI DSS requirements, referencing the PCI DSS version, the environment scope, validation date, and whether validation was via a Self-Assessment Questionnaire (SAQ) or a Report on Compliance (ROC). The form is signed by the entity being validated (and, when applicable, by the QSA). The other terms describe different concepts or forms that aren’t the standard PCI DSS attestation form.