Use when a system handling payment card data needs PCI DSS v4.0 tests or an SAQ level: cardholder data environment boundaries, network segmentation, no stored CVV, track data or PIN, key management, encrypted transmission, and scope reduction with hosted fields or tokens.