MENU
Which statement about the Attestation of Compliance (AOC) is correct?
Suggested Answer: A
Get Premium QSA_New_V4 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Attestation of Compliance (AOC):
The AOC is a document that confirms an entity's compliance with PCI DSS requirements. It is signed by the entity (merchant or service provider) and the Qualified Security Assessor (QSA) if a QSA is involved.
Different AOC Templates:
PCI DSS provides distinct templates for service providers and merchants, tailored to their respective roles and responsibilities within the cardholder data environment (CDE).
Invalid Options:
B: PCI SSC does not sign AOCs; they are signed by the merchant/service provider and the QSA.
C: AOCs differ between ROCs and SAQs, so the same template is not universally used.
D: Both the merchant/service provider and the QSA/ISA (Internal Security Assessor) must sign the AOC when applicable.
28 comments · newest first
AL
Alica
11 months ago
I always thought the same template was used for ROCs and SAQs.
BE
Belen
11 months ago
No way, the AOC has to be signed by both parties!
RA
Ramonita
11 months ago
Wait, I thought the AOC only needed one signature?
CA
Carin
12 months ago
Totally agree, I've seen both types in action.
MA
Marla
12 months ago
AOC templates differ for service providers and merchants, that's true.
JA
Javier
1 year ago
I think the AOC can be signed by either the merchant or the QSA, but I might be mixing it up with another document.
QU
Quiana
1 year ago
I feel like I saw a practice question that mentioned the AOC and ROCs, but I can't remember if they use the same template or not.
KE
Kent
1 year ago
I remember something about the AOC needing signatures, but I can't recall if it has to be both parties or just one.
KA
Katheryn
1 year ago
I think there are different AOC templates for service providers and merchants, but I'm not entirely sure.
CA
Cassi
1 year ago
Ah, this is a tricky one. I remember there being some differences between the AOC requirements for merchants versus service providers, but I can't quite recall the specifics. I'll have to think this through step-by-step to figure out the right answer.
CA
Cammy
1 year ago
I think the answer is D - the AOC only needs to be signed by either the merchant/service provider or the QSA/ISA. I'm fairly confident about that, but I'll double-check the details just to be sure.
LA
Lajuana
1 year ago
Hmm, I'm a bit unsure about this one. I know the AOC is an important part of PCI compliance, but I can't recall the specifics of the different templates or signing requirements. I'll have to review my notes carefully.
DA
Dannie
1 year ago
I'm pretty sure the correct answer is A - there are different AOC templates for service providers and merchants. I remember learning about that in the PCI DSS training.
CA
Caren
2 years ago
Haha, the PCI SSC probably has a template for 'The AOC Must Be Signed in Triplicate by the CEO, CFO, and the Family Dog' just to make things more complicated.
BE
Beatriz
2 years ago
I thought the AOC had to be signed by both the merchant/service provider and the PCI SSC? This is getting confusing!
CA
Caren
2 years ago
B) The AOC must be signed by both the merchant/service provider and by PCI SSC.
SH
Sheron
2 years ago
A) There are different AOC templates for service providers and merchants.
AD
Adolph
2 years ago
I agree with Hester, because the AOC is a document that confirms compliance with PCI DSS and it makes sense that it needs to be signed by the merchant/service provider or the QSA/ISA.
RO
Rosann
2 years ago
D) makes the most sense to me. The AOC can be signed by either the merchant/service provider or the QSA/ISA, not both.
HE
Hester
2 years ago
I disagree, I believe the correct statement is D) The AOC must be signed by either the merchant/service provider or the QSA/ISA.
LU
Luis
2 years ago
I'm pretty sure the correct answer is A) - there are different AOC templates for service providers and merchants. It's important to use the right one for your organization.
HE
Hershel
2 years ago
It's crucial to follow the proper procedures when it comes to compliance.
LE
Leonard
2 years ago
I always make sure to use the correct AOC template for my organization.
NI
Nieves
2 years ago
Yes, you're correct. It's important to use the right template.
EL
Eladia
2 years ago
I think you're right, A) is the correct answer.
GI
Gianna
2 years ago
Yes, you're correct. Using the correct AOC template is crucial for compliance.
LE
Leota
2 years ago
I think you're right, A) is the correct answer. It's important to use the right template for your organization.
ME
Meaghan
2 years ago
I think the correct statement is A) There are different AOC templates for service providers and merchants.