This guidance is designed for any organisation seeking to comply with the new requirement 11.3 along with its sub requirements 11.3.2. and 11.3.2.1 introduced in PCI DSS SAQ A v4.0 while implementing PCI DSS in their environment. The suggestions outlined in this document are applicable to merchants of all sizes, who are required to complete SAQ A for PCI DSS compliance.