PCI DSS scoping questionnaire
Payment Card Industry Data Security Standard
The Payment Card Industry Data Security Standard governs how cardholder data is stored, processed and transmitted. This questionnaire establishes your cardholder data environment, the validation route that applies to you, and the assessment effort involved.
What we ask
- Where cardholder data is stored, processed or transmitted, and whether any flows can be removed
- Whether you validate by SAQ or ROC, and which acquirer or brand requires it
- Your environment: locations, infrastructure, applications and the third parties that touch it
Takes a few minutes. Scope only — no pricing or commercial information is requested. Partial answers are fine; you can send the rest later and they are added to the same record.
Prefer to talk it through first? Scoping calls are often faster than a form when the environment is complicated or the requirement came from a customer or regulator. Book a consultation or send us the details and we will scope it with you.
QSA Authorised
CEMEA · Asia Pacific · USA
Delivering from Noida · Mumbai · Bengaluru · Pune · Dubai · Cairo · Melbourne — see all locations & addresses →