When you’re dealing with PCI DSS compliance, the term QSA comes up a lot. So what is a QSA? It’s a good question, because the term ‘QSA’ can refer to at least 3 related things. The term QSA itself stands for Qualified Security Assessor, which is a qualification issued by the PCI Security Standards Council.…
Tag: QSA
What is Level 1 PCI DSS Compliance?
This is another good question. If you search the PCI Council site (the maintainers of the PCI DSS suite), you won’t find any tables outlining different levels of compliance at all. There’s a reason for that, which is to do with how the PCI DSS first came to be. Historically, the various card brands including…
The Best PCI DSS Advice
I’ve been working in the card processing space for almost 20 years, which means I’ve seen PCI DSS evolve from its earliest days to its current form. In that time I’ve worked with lots of outside companies as clients and service providers. PCI DSS is sometimes thought of as a very strict standard, one that…