When merchants signal a deal that has a payment processor, they comply with be subject matter to fines if they are unsuccessful to take care of PCI DSS compliance. Formally attest your compliance. An AOC (attestation of compliance) is the shape you employ to sign you’ve achieved PCI DSS compliance. https://www.nathanlabsadvisory.com/blog/tag/security-testing/