If the entity being assessed is a service provider:
Identify whether the service provider shares keys with their customers for transmission or storage of cardholder data.
If keys are shared with customers:
i. Identify the document providing customers guidance on how to securely transmit, store, and update customers’ keys in accordance with Requirements 3.6.1 through 3.6.8
ii. Describe how the document was observed to be provided to customers.