PCI DSS SAQ A vs SAQ D: scope differences that actually determine which one applies | Vulnox Blog