Day 14 of 22PCI DSS· ~45 min

Draft the Report on Compliance (ROC-lite summary)

Scenario

You've completed the SAQ (Day 13). Now write the executive summary that goes to SwiftLend's Board + Bank Partner. It must accurately represent compliance status without over-claiming or under-selling.

Your role

You are producing the executive summary for board sign-off.

Your task

Draft a 1-page executive summary (Board-appropriate) covering: 1. Scope statement (what was assessed) 2. Result (Fully Compliant / Compliant with Compensating Controls / Non-Compliant) 3. Compensating controls in place (if any) 4. Findings + remediation status (top 5) 5. Next-year commitments 6. Risk statement — 'if we lose this compliance, what happens'

Deliverable format: 1-page executive summary, ~500-800 words

Toolkit

  • Board tone: 'we are compliant with 11 of 12 requirements, with a documented remediation plan for the 12th'
  • Never overclaim — 'partially compliant' is honest and defensible
  • Compensating controls MUST reference the original requirement they compensate for
  • Risk statement: contract loss, brand damage, regulatory action

Success criteria (what the AI grades against)

  • Result stated in exactly one sentence (not buried)
  • Findings prioritised (top 5, not all 20)
  • Compensating controls justified (or absence stated)
  • Board-appropriate language (no 'CDE segmentation' without explanation)
  • Concrete next-year commitments (2-4 items)

Log in to submit your deliverable for AI review.

Log in / Register