Step 1. Determine your PCI Merchant Level Step 2. Determine the applicable Self Assessment Questionaire (SAQ) to complete Step 3. Get scanned by an Approved Scanning Vendor (ASV) if required Step 4. Complete the AOC (first few pages of the SAQ) and maintain compliance
Is that it? Yes! Once you have completed the appropriate SAQ and gotten scanned from an ASV if you required it, you can fill out the AOC and assess yourself as compliant. You can submit the AOC (and a copy of the report if needed) as proof of your compliance to the requesting bank, merchant services provider, card brands, etc as needed.
1 Stop PCI Scan – A Division of Backbone Security, Inc.