Which term is used to describe the documentation that records an entity's compliance results against PCI DSS requirements?

Which term is used to describe the documentation that records an entity's compliance results against PCI DSS requirements?

• A. Self-Assessment Questionnaire
• B. Security Policy
• C. System Development Life Cycle
• D. Security Event

Answer: (A)

The Self-Assessment Questionnaire is the term used to document how an entity meets PCI DSS requirements. Merchants or service providers complete the SAQ to record and attest their compliance status for each applicable PCI DSS requirement, often alongside an Attestation of Compliance. This makes the SAQ the formal record of compliance results for those following the self-assessment path. A Security Policy is a general set of rules, not a specific record of PCI DSS compliance. The System Development Life Cycle describes how systems are built and maintained, not how compliance is documented. A Security Event refers to an incident or alert, not a formal compliance record.

The Self-Assessment Questionnaire is the term used to document how an entity meets PCI DSS requirements. Merchants or service providers complete the SAQ to record and attest their compliance status for each applicable PCI DSS requirement, often alongside an Attestation of Compliance. This makes the SAQ the formal record of compliance results for those following the self-assessment path. A Security Policy is a general set of rules, not a specific record of PCI DSS compliance. The System Development Life Cycle describes how systems are built and maintained, not how compliance is documented. A Security Event refers to an incident or alert, not a formal compliance record.