Create A timeline and delegate jobs (compliance automation software can make this exercise significantly less time-consuming) Formally attest your compliance. An AOC (attestation of compliance) is the form you use to signal you’ve accomplished PCI DSS compliance. Finishing your questionnaire without any “Mistaken” answers ensures that you’re ready to go. https://www.nathanlabsadvisory.com/iso-iec-19770-1-2017-it-asset-management-system.html