Produce a timeline and delegate tasks (compliance automation software is likely to make this exercise a lot less time intensive) Formally attest your compliance. An AOC (attestation of compliance) is the form you use to sign you’ve achieved PCI DSS compliance. Finishing your questionnaire with no “Erroneous” responses means that https://www.nathanlabsadvisory.com/blog/tag/security-culture/