When Merchants sign a contract that has a payment processor, they comply with be subject to fines if they are unsuccessful to take care of PCI DSS compliance. Formally attest your compliance. An AOC (attestation of compliance) is the form you employ to sign that you just’ve attained PCI DSS https://www.nathanlabsadvisory.com/iso-20000-1-it-services.html