An assessor is unsure if log review and interview is sufficient testing for a requirement. Who can best answer this question?
Payment brands
Issuing banks
Vendor
PCI SSC
Submit