QSA program

E830577

The QSA program is a PCI Security Standards Council initiative that certifies and manages security firms and professionals qualified to assess organizations’ compliance with the Payment Card Industry Data Security Standard (PCI DSS).

All labels observed (2)

Label Occurrences
QSA Program Guide 2
QSA program canonical 1

How this entity was disambiguated

Statements (47)

Predicate Object
instanceOf PCI SSC qualification program ⓘ
security assessor certification program ⓘ
abbreviation QSA ⓘ
aimsTo ensure assessor competence ⓘ
improve consistency of PCI DSS assessments ⓘ
protect cardholder data security ⓘ
canRevoke QSA company qualification ⓘ
QSA individual qualification ⓘ
canSuspend QSA company qualification ⓘ
QSA individual qualification ⓘ
documentation QSA Program Guide ⓘ
linked to: QSA program

QSA Qualification Requirements ⓘ
domain information security compliance ⓘ
payment card security ⓘ
focusesOnStandard Payment Card Industry Data Security Standard ⓘ
linked to: PCI DSS
fullName Qualified Security Assessor program ⓘ
governs QSA qualification requirements ⓘ
QSA quality assurance expectations ⓘ
QSA reporting obligations ⓘ
hasPrerequisite appropriate professional liability insurance ⓘ
documented quality assurance program ⓘ
organizational independence from assessed entities ⓘ
hasVersionAlignment PCI DSS versions ⓘ
includes application and vetting process ⓘ
exam on PCI DSS knowledge ⓘ
training on PCI DSS ⓘ
language English ⓘ
managedBy PCI Security Standards Council ⓘ
monitors QSA performance ⓘ
operatesGlobally true ⓘ
purpose certify security firms and professionals to assess PCI DSS compliance ⓘ
qualifies QSA companies ⓘ
QSA individuals ⓘ
Qualified Security Assessors ⓘ
relatedTo Attestation of Compliance ⓘ
PCI DSS assessment procedures ⓘ
Report on Compliance ⓘ
requires annual requalification ⓘ
knowledge of PCI DSS requirements ⓘ
ongoing training ⓘ
security assessment experience ⓘ
sector payment card industry ⓘ
supports card brands’ security programs ⓘ
usedBy merchants ⓘ
payment processors ⓘ
service providers ⓘ
usedFor PCI DSS compliance assessments ⓘ

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

Qualified Security Assessor program → documentation → QSA Program Guide ⓘ
linked to: QSA program
QSA program → documentation → QSA Program Guide ⓘ
linked to: QSA program