Which of the following statements best describe PCI DSS compliance assessment?
a) A compliance requirement conducted by the merchant bank
b) A self-assessment questionnaire
c) A compliance report submitted by the internal security assessor
d) An annual onsite evaluation of compliance with PCI DSS