Source: https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2_AOC_ServiceProviders_3_fr-FR.pdf