Your PCI DSS scope is the foundation for all of your future compliance efforts. Any errors in your determination of the scope can introduce unnecessary risk and also lead to a false sense of security, or incorrect attestation of compliance. Over many years, Dionach have performed numerous scope reviews for our clients, and it is very common for us to find additional cardholder data flows or discover that the wrong SAQ is being completed. Also, becoming compliant with a large scope can be very difficult and create a number of inherent risks. As part of the scope review, Dionach look for any opportunity to reduce your scope, or suggest alternative processes that could reduce your compliance burden and risk.