All merchants levels 2-4 are required to annually fill out a self assessment questionnaire. The questionnaire that is used is determined by the merchant's validation type.

This basic questionnaire is provided to help merchants identify typical areas of problems. It is oriented towards ecommerce merchants with a validation type of "C".

Note: This is not an official PCI DSS Questionnaire. It is extracted from the self assessment "C" questionnaire. Passing this questionnaire does not mean that you are PCI DSS compliant. It is used to identify typical problem areas.