PCI DSS: scope and responsibilities
This page does not attest Complex System PCI DSS compliance. It presents no certificate, AoC or audit report as obtained.
What must be documented
Identify every entity involved in processing, hosting or transmitting payment data. Scope and responsibilities must be reviewed with partners and qualified professionals.
Evidence to review
Obtain applicable attestations, dates, scope and covered services. Verify that documents match the entities and integration actually used.