Source: https://www.pcisecuritystandards.org/documents/Penetration-Testing-Guidance-v1_1.pdf