The RSI security web site breaks down the ways in some depth, but the procedure in essence goes such as this: Formally attest your compliance. An AOC (attestation of compliance) is the shape you use to sign that you choose to’ve realized PCI DSS compliance. Ending your questionnaire without “Improper” https://www.nathanlabsadvisory.com/fedramp.html