Source: https://www.pcisecuritystandards.org/documents/Penetration_Testing_Guidance_March_2015.pdf