# Provider Question Card

Part of **W/ Main Street: Chamber Member Payment Readiness** · CH-KIT-02

> Turn 'the vendor handles it' into answerable service and responsibility questions.

## Working prompts

- [ ] What exact service do we use?
- [ ] What current PCI DSS evidence covers that service?
- [ ] Which activities are provider, customer, or shared?
- [ ] Which configuration choices can change the boundary?
- [ ] Who tells us when the service or its validation changes?

## Notes, owner, evidence, and next action

| Prompt | Working response | Owner | Evidence / source | Next action |
| --- | --- | --- | --- | --- |
| 1 |  |  |  |  |
| 2 |  |  |  |  |
| 3 |  |  |  |  |
| 4 |  |  |  |  |
| 5 |  |  |  |  |

## Authority boundary

This independent practitioner resource is education, not a PCI DSS assessment, applicability decision, validation instruction, legal opinion, incident-response directive, or statement of a Chamber's position. Members should confirm validation and reporting direction with their compliance-accepting entity, typically their acquirer or payment brand as applicable.

_Fictional teaching prompts. The Cluster of Wack is an independent practitioner resource and is not affiliated with or endorsed by PCI SSC._