Acronym for “Report on Compliance.” Reporting tool used to document detailed results from an entity’s PCI DSS assessment.