If you want to be compliant with Payment Card Industry Data Security Standards (PCI DSS), then you’re required to perform quarterly scans of your internal and external networks using an approved scanning vendor, or ASV.