Which statement is true regarding the PCI DSS Report on Compliance (ROC)? A) The ROC Reporting Template and instructions provided by PCI SSC should be used for all ROCs. B) The assessor may use either their own template or the ROC Reporting Template provided by PCI SSC. C) The assessor must create their own ROC template for each assessment report. D) The ROC Reporting Template provided by PCI SSC is only required for service provider assessments