Action Plan, non-compliant Requirements
Applicable vulnerabilities
Application security assessment tools
Approved Scanning Vendor (ASV)
Assessor Quality Management (AQM) process
Attestation of Compliance (AOC)
documented evidence
non-compliance conditions
Part 2a
Part 2d
Part 3
Part 4
PCI assessment
QSA
service providers
Audit logs
anomalies/suspicious activity detection
anomalies/suspicious activity identification
destruction and unauthorized modifications ...