Keeping Up With PCI Security Standards - Slide 16 (
Page 16 of 18 )
Once an organization figures out which SAQ they must complete, they’ll then be required to answer the questionnaire, fill out an Attestation of Compliance and to prove that they meet the requirements for the specific SAQ they are filling out. All of this information should then be packaged and sent to their acquirer, which acts as the middle man between the payment card vendor and the merchant.