thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Self-Assessment Questionnaire (SAQ)

PCI DSS validation tool for eligible merchants and service providers to self-assess compliance.

Definition

SAQ types match payment channels: A (fully outsourced card-not-present), A-EP (e-commerce with partial outsourcing that affects payment page security), B, B-IP, C, C-VT, P2PE, and D (all requirements, including service providers). Using the correct SAQ depends on how cardholder data is handled.

Example

A small online store using a fully hosted payment page completes SAQ A.

Exam tip

Choosing SAQ A versus A-EP depends on whether the merchant's website can affect the payment page.

Related terms