Skip to content

Glossary: Business Risk, Third Parties and Compliance

Attestation of Compliance (AOC)

Also written: AOC, PCI DSS AOC

A PCI DSS form in which a business that handles card data states that it meets the standard. Kettle & Crane keeps its payment company's AOC and sends its own to the payment company each year.

Where the book teaches it

Related terms

PCI DSS (Payment Card Industry Data Security Standard)SAQ A (Self-Assessment Questionnaire A)Attestation