Many steps are involved in validating PCI DSS compliance. An assessment includes a Qualified Security Assessor (QSA), Internal Security Assessor (ISA), Report on Compliance (ROC), Self-Assessment Questionnaire (SAC).