There are no public league tables published which rank how much volume each PCI QSAC handles. At least, that information is not generally available publicly, and for good reason: the volumes handled by a QSA company are commercially sensitive. They give insight into whether the business is growing or shrinking, thriving or dying. Much of…
Tag: QSA
How to choose your PCI QSA?
When you’re subject to PCI DSS, choosing the right PCI QSA is one of the most important decisions you can make. Ultimately, all QSAs will assess you against the same standard. But having the right QSA can make your life a much more pleasant place to be. Let’s explore how the right QSA can help…
What is a PCI QSA and a QSAC?
When you’re dealing with PCI DSS compliance, the terms QSA and QSAC come up a lot. So what are they? It’s a good question, because the term ‘QSA’ can refer to at least 3 related things. The term QSA itself stands for Qualified Security Assessor, which is a qualification issued by the PCI Security Standards…
What is Level 1 PCI DSS Compliance?
If you search the PCI Council site (the maintainers of the PCI DSS suite), you won’t find any tables outlining different levels of compliance at all. There’s a reason for that, which is to do with how the PCI DSS first came to be. Historically, the various card brands including MasterCard and Visa all operated…
The Best PCI DSS Advice
With 20 year’s experience in the card processing space, I’ve seen PCI DSS evolve from its earliest days to its current form. In that time I’ve worked with lots of outside companies as clients and service providers. PCI DSS is sometimes thought of as a very strict standard, one that takes a prescriptive approach on…
