A formal assessment document that confirms an organization meets the security requirements of the Payment Card Industry Data Security Standard (PCI DSS). Prepared by a qualified assessor, the RoC details how cardholder data is protected across systems, processes, and networks to support secure payment operations and regulatory compliance.