Audit & Assurance
Self-Assessment Questionnaire (SAQ)
PCI DSS validation route for merchants below Level 1 thresholds.
SAQs come in flavours (A, A-EP, B, C, D, etc.) matched to merchant processing models. SAQ-D for service providers is the most onerous and closest to a full RoC.