If the application requires your buyers to enter their information on their own individual gadgets, Then you really qualify for SAQ A. The difference between the different sorts of SOC audits lies from the scope and period in the assessment: Every time cardholder information is accessed, the function really should https://www.nathanlabsadvisory.com/blog/nathan/secure-federal-contracts-with-fisma-compliance/