Payment Card Industry Security Standards Council, Information Supplement: Third-Party Security Assurance (Aug. 7, 2014) (full-text).