Report on Compliance
E830578
Report on Compliance is a formal PCI DSS assessment document produced by a Qualified Security Assessor that details an organization’s adherence to payment card data security requirements.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Report on Compliance canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T9931114 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Report on Compliance Context triple: [Qualified Security Assessor program, output, Report on Compliance]
-
A.
Document of Compliance
The Document of Compliance is an international maritime certificate issued to a shipping company confirming that its safety management system meets the requirements of the ISM Code.
-
B.
Compliance
"Compliance" is a psychological thriller film in which Bill Camp appears, dramatizing a disturbing real-life case of manipulation and abuse during a fast-food restaurant hoax phone call.
-
C.
Compliance Program Guidance
Compliance Program Guidance is a series of advisory documents that outline recommended standards and best practices for healthcare organizations to prevent, detect, and address fraud, waste, and abuse in federal health care programs.
-
D.
Enforcement and Compliance
Enforcement and Compliance is a unit within the U.S. International Trade Administration responsible for enforcing trade laws, monitoring unfair trade practices, and ensuring compliance with trade agreements and regulations.
-
E.
Report on Prosecution
Report on Prosecution is a section of the Wickersham Commission’s landmark early-1930s study of U.S. law enforcement, focusing on the practices and problems of criminal prosecution.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Report on Compliance Target entity description: Report on Compliance is a formal PCI DSS assessment document produced by a Qualified Security Assessor that details an organization’s adherence to payment card data security requirements.
-
A.
Document of Compliance
The Document of Compliance is an international maritime certificate issued to a shipping company confirming that its safety management system meets the requirements of the ISM Code.
-
B.
Compliance
"Compliance" is a psychological thriller film in which Bill Camp appears, dramatizing a disturbing real-life case of manipulation and abuse during a fast-food restaurant hoax phone call.
-
C.
Compliance Program Guidance
Compliance Program Guidance is a series of advisory documents that outline recommended standards and best practices for healthcare organizations to prevent, detect, and address fraud, waste, and abuse in federal health care programs.
-
D.
Enforcement and Compliance
Enforcement and Compliance is a unit within the U.S. International Trade Administration responsible for enforcing trade laws, monitoring unfair trade practices, and ensuring compliance with trade agreements and regulations.
-
E.
Report on Prosecution
Report on Prosecution is a section of the Wickersham Commission’s landmark early-1930s study of U.S. law enforcement, focusing on the practices and problems of criminal prosecution.
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
PCI DSS assessment document
ⓘ
compliance report ⓘ |
| assessmentType | point-in-time assessment ⓘ |
| associatedWith | PCI Security Standards Council ⓘ |
| audience |
acquirers and payment brands
ⓘ
internal risk and compliance teams ⓘ |
| basedOn | PCI Security Standards Council ROC template ⓘ |
| confidentiality | restricted distribution ⓘ |
| describes |
organization’s cardholder data environment
ⓘ
scope of PCI DSS assessment ⓘ |
| documents |
final compliance determination
ⓘ
identified gaps and remediation status ⓘ sampling approach for systems and locations ⓘ testing methodology used by QSA ⓘ |
| evidenceType |
documentation review
ⓘ
interviews ⓘ technical testing ⓘ |
| format | formal written report ⓘ |
| frequency | typically annual ⓘ |
| governsStandard | PCI DSS ⓘ |
| hasAbbreviation | ROC ⓘ |
| includes |
assessment of each PCI DSS requirement
ⓘ
attestation of compliance section ⓘ compensating controls ⓘ description of segmentation controls ⓘ detailed testing procedures ⓘ evidence of policies and procedures ⓘ executive summary ⓘ list of in-scope systems and locations ⓘ test results ⓘ |
| language | typically English ⓘ |
| lifecycleStage | produced after completion of onsite assessment ⓘ |
| producedBy |
Qualified Security Assessor
ⓘ
linked to:
Qualified Security Assessor program
|
| producedFor |
acquiring bank
ⓘ
assessed organization ⓘ payment card brands ⓘ |
| purpose |
demonstrate PCI DSS compliance status
ⓘ
document adherence to PCI DSS requirements ⓘ provide detailed evidence of security controls ⓘ |
| regulates | cardholder data security controls ⓘ |
| requiredBy |
payment brands for Level 1 merchants
ⓘ
payment brands for certain service providers ⓘ |
| scopeIncludes | people, processes, and technologies handling cardholder data ⓘ |
| signedBy |
Qualified Security Assessor company
ⓘ
assessed organization’s officer ⓘ |
| usedFor |
merchant compliance validation
ⓘ
service provider compliance validation ⓘ supporting evidence for Attestation of Compliance ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Report on Compliance Description of subject: Report on Compliance is a formal PCI DSS assessment document produced by a Qualified Security Assessor that details an organization’s adherence to payment card data security requirements.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.