The Attestation of Scan Compliance provides an overall summary that shows whether the scan customer's infrastructure received a passing scan and met the scan validation requirement.
This section includes contact information for the scan customer and your approved scanning vendor (ASV), including company name, contact name, title, telephone number, email address and business address.
What does the compliance status mean? The overall PCI compliance status. A status of indicates that all hosts in the report passed the PCI compliance requirements. A status of
indicates that at least one host in the report failed the PCI compliance requirements.
Tell me about out of scope components. These are components found by the ASV but not scanned because they are defined as being out of scope. This includes IP addresses that were previously in-scope but removed from the subscription, and IP addresses discovered by the service as part of your in-scope infrastructure. Note: This information does not impact the PCI pass/fail compliance status. To see a list of the IP addresses that were counted as out of scope, go to Account > IP Assets and click the Out of Scope Assets button.
What is the scan expiration date? The scan expiration date is 90 days from the most recent scan date included in the report.
What is the scan customer attestation? This is the scan customer attestation, required for certification.
What is the ASV attestation? The ASV attestation includes the SDP/PCI vendor certificate number assigned to the ASV.