Considering The fact that its development, PCI DSS has gone through various iterations so that you can keep up with changes to the net danger landscape. Even though the basic principles for compliance have remained continuous, new prerequisites are periodically included. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/blog/nathan/is-a-virtual-ciso-right-for-your-business-evaluating-cost-effective-cybersecurity-solutions/