Report on Compliance (ROC)
A Report on Compliance is the formal PCI DSS assessment report, produced by a qualified security assessor, that documents how an organisation meets each requirement.
What is Report on Compliance (ROC)?
A ROC is required for Level 1 merchants, those processing more than 6 million Visa or Mastercard transactions a year; smaller merchants may instead complete a self-assessment questionnaire.