What is an Attestation of Compliance? | Centraleyes

What is an Attestation of Compliance (AoC)? www.centraleyes.com/glossary/...
Attestation of Compliance (AoC) is a statement of an organization’s compliance with PCI DSS.
How is an AOC Document Completed?
A Qualified Security Assessor (QSA) completes the AOC, demonstrating the business’s PCI DSS compliance. A QSA is an individual employed by a company who received certification from the PCI Security Standards Council as a PCI compliance assessor. Alternatively, a merchant can complete the AoC form themselves if their internal audit performs validation. Once completed, the form is submitted to the retailer’s merchant bank which then sends it to the payment brand along with any other necessary documentation.
What is the significance of an AOC?
An AoC is significant because it proves that a business is PCI compliant and follows best practices to maintain a secure payment environment. Noncompliance threatens the organization’s reputation as well as consumers’ personal payment information. Moreover, failure to comply greatly increases an organization’s risk in the event of a data breach because sensitive information is vulnerable to a data breach and can easily land up in dangerous hands. A data breach can potentially harm thousands, and even millions, of customers by revealing stored card information and payment details.
✅ Do you need help with your attestation of compliance? Book a demo today: resources.centraleyes.com/req...
Learn more: www.centraleyes.com/glossary/...
#AoC #PCIDSS #DataSecurity