Qualified Security Assessor

Short description: Designation by PCI Security Standards Council

This article relies too much on references to primary sources. Please improve this by adding secondary or tertiary sources. (August 2008) (Learn how and when to remove this template message)

|

Qualified Security Assessor (QSA) is a designation conferred by the PCI Security Standards Council to those individuals that meet specific information security education requirements, have taken the appropriate training from the PCI Security Standards Council, are employees of a Qualified Security Assessor (QSA) company approved PCI security and auditing firm,[1] and will be performing PCI compliance assessments as they relate to the protection of credit card data.

The term QSA can be implied to identify an individual qualified to perform payment card industry compliance auditing and consulting or the firm itself. QSA companies are sometimes differentiated from QSA individuals by the initialism 'QSAC'.[2]

The primary goal of an individual with the PCI QSA certification is to perform an assessment of a firm that handles credit card data against the high-level control objectives of the PCI Data Security Standard (PCI DSS).

Consultants holding the QSA certification must re-certify annually to ensure they are conversant with any changes to the PCI-DSS requirements and guidelines.

## References

1. ↑ QSA Companies
2. ↑ "Become a Qualified Security Assessor (QSA)". https://www.pcisecuritystandards.org/assessors_and_solutions/become_qsa/.

## External links

* PCI Security Standards Council

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Qualified Security Assessor. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Qualified_Security_Assessor&oldid=4337678"