Considering the fact that its development, PCI DSS has passed through quite a few iterations so as to keep up with adjustments to the web risk landscape. Whilst the basic rules for compliance have remained regular, new prerequisites are periodically extra. Formally attest your compliance. An AOC (attestation of compliance) https://www.nathanlabsadvisory.com/red-team-exercise.html