SAQ C, v3.1 - PCI Security Standards Council - pcissc 2026

The document outlines the Payment Card Industry Data Security Standard (PCI DSS) Self-Assessment Questionnaire C and Attestation of Compliance for merchants with payment application systems connected to the internet, specifically those that do not store electronic cardholder data. It details compliance requirements, assessment steps, and guidelines for completing the self-assessment questionnaire. The document includes sections on maintaining secure networks, protecting cardholder data, managing vulnerabilities, implementing access controls, monitoring networks, and maintaining an information security policy. It also provides appendices for compensating controls and non-applicability explanations.