Scan Reporting: Attestation of Scan Compliance — which template appendix is required?

• A. Appendix B of the ASV Program Guide
• B. Appendix C of the ASV Program Guide
• C. Appendix A of the ASV Program Guide
• D. Appendix D of the ASV Program Guide

Answer: (C)

The Attestation of Scan Compliance uses the Appendix C template from the ASV Program Guide. This template is the designated form for formally confirming that the scans performed meet PCI DSS requirements, including details like the scope, dates, and the validating statement from the scanning vendor. Using Appendix C ensures a standardized format that banks and PCI SSC expect, making the report itself consistent and verifiable. The other appendices are intended for different parts of the reporting process, not for the Attestation of Scan Compliance, so they don’t fulfill the required purpose.