The Report on Compliance is an annual assessment performed by a Qualified Security Assessor (QSA). The report details the organization’s security posture, the systems, and the protection of cardholder data. ROC applies to both Payment card merchants and service providers.