Can a partial PCI DSS assessment be documented in a Report on Compliance (ROC)?
Yes. Where an entity wants its assessor to conduct a PCI DSS assessment against only a subset of PCI DSS requirements, it is acceptable to document this partial assessment using …