What does a small‐to‐medium sized business (Level 4 merchant) have to do in order to satisfy the PCI requirements?
To satisfy the requirements of PCI, a merchant must complete the following steps: • Identify your Validation Type as defined by PCI DSS see below . This is used to determine which Self Assessment Questionnaire is appropriate for your business. • Complete the Self‐Assessment Questionnaire according to the instructions in the Self‐ Assessment Questionnaire Instructions and Guidelines. • Complete and obtain evidence of a passing vulnerability scan with a PCI SSC Approved Scanning Vendor (ASV), Such as our partner, ControlScan. (www.controlscan.com). Note scanning does not apply to all merchants. It is required for Validation Type 4 and 5 those merchants with external facing IP addresses. Basically if you electronically store cardholder information or if your processing systems have any internet connectivity, a quarterly scan by an approved scanning vendor is required. • Complete the relevant Attestation of Compliance in its entirety (located in the SAQ tool). • Submit the SAQ, evidence of
Related Questions
- What does a small to medium sized business, level 4 merchant, has to do to become PCI Compliant and meet all the requirements?
- What does a small-to-medium sized business (Level 4 merchant) have to do in order to satisfy the PCI requirements?
- What does a small‐to‐medium sized business (Level 4 merchant) have to do in order to satisfy the PCI requirements?
