PCI SSC does not define specific reporting requirements for QSAs assisting merchants with Self-Assessment Questionnaires (SAQs). Before beginning any engagement, the QSA should have a clear understanding of their expected …
Merchants and service providers should always consult with their acquirer (merchant bank) or payment brand directly, as applicable, to confirm their PCI DSS validation and reporting method (e.g. whether to …