SAQ A-EP

GPTKB entity

Statements (19)
Predicate Object
gptkbp:instanceOf PCI DSS Self-Assessment Questionnaire type
gptkbp:appliesTo merchants that control the redirection to a third-party payment processor
merchants with e-commerce websites that do not store, process, or transmit cardholder data on their systems
gptkbp:compatibleWith merchants that outsource all payment processing and do not control the redirection
gptkbp:hasRequirementCount 191
gptkbp:hasVersion v4.0
https://www.w3.org/2000/01/rdf-schema#label SAQ A-EP
gptkbp:latestReleaseVersion 2022
gptkbp:publishedBy gptkb:PCI_Security_Standards_Council
gptkbp:relatedTo gptkb:PCI_DSS
gptkb:SAQ_A
gptkb:SAQ_D
gptkbp:requires penetration testing
internal vulnerability scans
quarterly external vulnerability scans
gptkbp:usedFor e-commerce merchants
merchants with website that does not receive cardholder data but controls how consumers are redirected to a PCI DSS validated third-party payment processor
gptkbp:bfsParent gptkb:Self-Assessment_Questionnaire_(SAQ)
gptkbp:bfsLayer 5