Introducing PCI's New Self-Assessment Questionnaire

### Executive Summary This guidance describes PCI DSS 4.0 SAQ SPoC (Software-based PIN entry on COTS) eligibility and controls for merchants using card readers attached to smartphones/tablets, outlining validation/listing requirements, required separation from other networks, adherence to SPoC vendor user guides, and distinctions from SAQ P2PE to help merchants determine appropriate SAQ scope and compliance responsibilities.