Once you've determined which assessment you must finish, another action would be to conduct the assessment, total the pertinent SAQ or ROC documentation, and post it to Stripe for evaluation. Formally attest your compliance. An AOC (attestation of compliance) is the shape you use to signal that you simply’ve achieved https://www.nathanlabsadvisory.com/iso-27001-information-security.html