The RSI Security site breaks down the ways in some depth, but the process in essence goes such as this: Evaluate requests and question any questions (pro idea- it’s crucial that you select a seasoned auditing firm that’s ready to answer inquiries through the full audit course of action) PCI https://www.nathanlabsadvisory.com/blog/tag/cybersecurity-recruitment/