Qualified Security Assessor program

E192649

The Qualified Security Assessor program is a PCI Security Standards Council initiative that certifies organizations and individuals to assess and validate merchants’ and service providers’ compliance with PCI Data Security Standards.

All labels observed (4)

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf PCI SSC program ⓘ
certification program ⓘ
administeredBy PCI Security Standards Council ⓘ
appliesTo merchants ⓘ
service providers ⓘ
assessmentType third-party security assessment ⓘ
certifies Qualified Security Assessor companies ⓘ
Qualified Security Assessor individuals ⓘ
documentation QSA Program Guide ⓘ
linked to: QSA program

QSA Qualification Requirements ⓘ
focusesOnStandard PCI Data Security Standard ⓘ
linked to: PCI DSS
geographicScope global ⓘ
governsActivity onsite review of cardholder data environment ⓘ
testing of PCI DSS security controls ⓘ
governsRole Qualified Security Assessor ⓘ
hasAbbreviation QSA program ⓘ
hasEligibilityCriterion employer is a PCI SSC-approved QSA company ⓘ
information security experience ⓘ
knowledge of payment card industry ⓘ
hasParticipantType PCI SSC training attendee ⓘ
QSA company ⓘ
QSA employee ⓘ
industryDomain payment card security ⓘ
objective to improve security of cardholder data ⓘ
to provide consistent PCI DSS assessments ⓘ
output Attestation of Compliance ⓘ
Report on Compliance ⓘ
purpose to qualify assessors to evaluate PCI DSS compliance ⓘ
regulatoryContext card brand PCI programs ⓘ
relatedProgram Approved Scanning Vendor program ⓘ
Internal Security Assessor program ⓘ
Payment Application Qualified Security Assessor program ⓘ
requires adherence to PCI SSC QSA Qualification Requirements ⓘ
annual requalification ⓘ
independence from assessed entities ⓘ
ongoing continuing professional education ⓘ
organizational quality assurance processes ⓘ
passing PCI SSC qualification exams ⓘ
training by PCI Security Standards Council ⓘ
requiresComplianceWith PCI SSC Code of Professional Responsibility ⓘ
scopeIncludes assessment of PCI DSS controls ⓘ
validation of PCI DSS compliance ⓘ
supportsProcess PCI DSS compliance validation ⓘ
on-site PCI DSS assessments ⓘ
usedBy acquiring banks ⓘ
large merchants ⓘ
payment card brands ⓘ
payment processors ⓘ

How these facts were elicited

Referenced by (8)

Full triples — surface form annotated when it differs from this entity's canonical label.

PCI Security Standards Council → managesProgram → Qualified Security Assessor program ⓘ
PCI DSS → complianceValidatedBy → Qualified Security Assessor ⓘ
linked to: Qualified Security Assessor program
Qualified Security Assessor program → governsRole → Qualified Security Assessor ⓘ
linked to: Qualified Security Assessor program
QSA program → fullName → Qualified Security Assessor program ⓘ
QSA program → qualifies → Qualified Security Assessors ⓘ
linked to: Qualified Security Assessor program
Report on Compliance → producedBy → Qualified Security Assessor ⓘ
linked to: Qualified Security Assessor program
QSA Qualification Requirements → appliesToProgram → PCI SSC Qualified Security Assessor Program ⓘ
linked to: Qualified Security Assessor program
PCI SSC Code of Professional Responsibility → appliesTo → Qualified Security Assessors ⓘ
linked to: Qualified Security Assessor program