PCi

PCI Assessments Center

Loading your workspace…

PCiPCI Assessments Center
Glossary · PCI DSS v4.0.1

QSA — Qualified Security Assessor

A Qualified Security Assessor (QSA) is an individual certified by the PCI Security Standards Council, employed by a QSA Company, who is authorised to perform PCI DSS assessments and sign the resulting report.

Find your SAQ Full glossary

What it means in practice

QSA Companies are qualified by PCI SSC and listed publicly; individual assessors requalify annually.
A QSA is required where a Report on Compliance is mandated, and is often engaged to validate and sign an SAQ and its Attestation of Compliance.
PCI Assessments Center is operated by Haumaru Whānau, a certified PCI QSA Company.

Not sure how this affects your assessment?

The free SAQ selector walks the official PCI SSC v4.0.1 decision flow, records every answer and re-derives the recommendation server-side with a confidence score.

Run the SAQ selector Talk to a QSA

Definitions paraphrased from the PCI DSS v4.0.1 standard and the PCI SSC Glossary of Terms, Abbreviations and Acronyms. Independent summary; not endorsed by PCI SSC.