[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-174695-105":53,"doc-detail-174695-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","pci-data-security-standard-qsa-qualification-requirements-version-20","PCI Data Security Standard - QSA Qualification Requirements - Version 2.0","","The QSA Qualification Requirements document defines the necessary qualifications for security companies and their employees to be qualified by PCI SSC to perform PCI DSS Assessments. It explains the role of Qualified Security Assessor (QSA) Companies in validating adherence to PCI DSS requirements and highlights how qualified, consistent assessment work supports confidence that cardholder data is adequately protected. It also outlines qualification objectives and the qualification process structure, including related program qualifications.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/pci-data-security-standard-qsa-qualification-requirements-version-20/174695/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/pci-data-security-standard-qsa-qualification-requirements-version-20/174695.png","ImageObject",442,249,{"name":88,"@type":89},"Bill Black","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-09-29","2026-09-02",true,{"@type":98,"interactionType":99,"userInteractionCount":47},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the purpose of the QSA Qualification Requirements document?","Question",{"text":108,"@type":109},"It defines the necessary qualifications for security companies and their employees to be qualified by PCI SSC to perform PCI DSS Assessments.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"What is a QSA Company and why is it important?",{"text":113,"@type":109},"A QSA Company is an independent security organization qualified by PCI SSC to validate an entity’s adherence to PCI DSS requirements. Its quality and consistency help ensure cardholder data is adequately protected.",{"name":115,"@type":106,"acceptedAnswer":116},"Which requirements are addressed for QSA qualification?",{"text":117,"@type":109},"The document covers QSA company business requirements, capability requirements for companies and employees, and administrative requirements, including evidence retention and security incident response.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},174695,1788315721,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":47,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":125,"read_time":140},24189269381491,"https://ap-avatar.wpscdn.com/avatar/160000cf11732dd8392?x-image-process=image/resize,m_fixed,w_180,h_180&k=1788146458752108895","Payment Card Industry (PCI) \u000bData Security Standard\nQualification Requirements\nFor Qualified Security Assessors (QSA)\nVersion 2.0\nJune 2015\n\u000f\nDocument Changes\nTable of Contents\n\u0013 TOC \\o \"1-1\" \\h \\z \\t \"Heading 2,2,Style Heading 2 + Justified,2,Appendix 2,2,Heading y,2\" \u0014\u0013 HYPERLINK \\l \"_Toc416947096\" \u0014Document Changes\t\u0013 PAGEREF _Toc416947096 \\h \u0014ii\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947097\" \u00141\tIntroduction\t\u0013 PAGEREF _Toc416947097 \\h \u00141\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947098\" \u00141.1\tTerminology\t\u0013 PAGEREF _Toc416947098 \\h \u00141\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947099\" \u00141.2\tGoal\t\u0013 PAGEREF _Toc416947099 \\h \u00143\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947100\" \u00141.3\tQualification Process Overview\t\u0013 PAGEREF _Toc416947100 \\h \u00143\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947101\" \u00141.4\tDocument Structure\t\u0013 PAGEREF _Toc416947101 \\h \u00143\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947102\" \u00141.5\tRelated Publications\t\u0013 PAGEREF _Toc416947102 \\h \u00144\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947103\" \u00141.6\tQSA Company Application Process\t\u0013 PAGEREF _Toc416947103 \\h \u00144\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947104\" \u00141.7\tAdditional Information Requests\t\u0013 PAGEREF _Toc416947104 \\h \u00145\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947105\" \u00142\tQSA Company Business Requirements\t\u0013 PAGEREF _Toc416947105 \\h \u00146\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947106\" \u00142.1\tBusiness Legitimacy\t\u0013 PAGEREF _Toc416947106 \\h \u00146\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947107\" \u00142.2\tIndependence\t\u0013 PAGEREF _Toc416947107 \\h \u00146\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947108\" \u00142.3\tInsurance Coverage\t\u0013 PAGEREF _Toc416947108 \\h \u00148\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947109\" \u00142.4\tQSA Company Fees\t\u0013 PAGEREF _Toc416947109 \\h \u00148\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947110\" \u00142.5\tQSA Agreement\t\u0013 PAGEREF _Toc416947110 \\h \u00148\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947111\" \u00143\tQSA Capability Requirements\t\u0013 PAGEREF _Toc416947111 \\h \u00149\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947112\" \u00143.1\tQSA Company – Services and Experience\t\u0013 PAGEREF _Toc416947112 \\h \u00149\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947113\" \u00143.2\tQSA Employee – Skills and Experience\t\u0013 PAGEREF _Toc416947113 \\h \u001410\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947114\" \u00143.3\tCode of Professional Responsibility\t\u0013 PAGEREF _Toc416947114 \\h \u001412\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947115\" \u00144\tQSA Administrative Requirements\t\u0013 PAGEREF _Toc416947115 \\h \u001413\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947116\" \u00144.1\tContact Person\t\u0013 PAGEREF _Toc416947116 \\h \u001413\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947117\" \u00144.2\tBackground Checks\t\u0013 PAGEREF _Toc416947117 \\h \u001413\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947118\" \u00144.3\tInternal Quality Assurance\t\u0013 PAGEREF _Toc416947118 \\h \u001414\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947119\" \u00144.4\tProtection of Confidential and Sensitive Information\t\u0013 PAGEREF _Toc416947119 \\h \u001415\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947120\" \u00144.5\tEvidence (Assessment Workpaper) Retention\t\u0013 PAGEREF _Toc416947120 \\h \u001416\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947121\" \u00144.6\tSecurity Incident Response\t\u0013 PAGEREF _Toc416947121 \\h \u001417\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947122\" \u00145\tQSA List and Annual Re-Qualification\t\u0013 PAGEREF _Toc416947122 \\h \u001419\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947123\" \u00145.1\tQSA List\t\u0013 PAGEREF _Toc416947123 \\h \u001419\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947124\" \u00145.2\tAnnual Re-Qualification\t\u0013 PAGEREF _Toc416947124 \\h \u001419\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947125\" \u00146\tAssessor Quality Management Program\t\u0013 PAGEREF _Toc416947125 \\h \u001421\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947126\" \u00146.1\tQSA Audit Process\t\u0013 PAGEREF _Toc416947126 \\h \u001421\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947127\" \u00146.2\tQSA Quality Remediation Process\t\u0013 PAGEREF _Toc416947127 \\h \u001421\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947128\" \u00146.3\tQSA Revocation Process\t\u0013 PAGEREF _Toc416947128 \\h \u001422\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947129\" \u0014Appendix A.\tQualified Security Assessor (QSA) Agreement\tA-\u0013 PAGEREF _Toc416947129 \\h \u00141\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947130\" \u0014Appendix B.\tInsurance Coverage\tB-\u0013 PAGEREF _Toc416947130 \\h \u00141\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947131\" \u0014Appendix C.\tQSA Company Application\tC-\u0013 PAGEREF _Toc416947131 \\h \u00141\u0015\u0015\n\u0013 HYPERLINK \\l \"_Toc416947132\" \u0014Appendix D.\tQSA Employee Application\tD-\u0013 PAGEREF _Toc416947132 \\h \u00141\u0015\u0015\n\u0015\nIntroduction\nIn response to requests from members of the payment card industry (“PCI”) for a unified set of payment account data security requirements, PCI Security Standards Council, LLC (“PCI SSC”) adopted and maintains the P","cbCaitTb7vn0yuhx","https://ap.wps.com/l/cbCaitTb7vn0yuhx","docx",256970,56,"English","# Introduction\n## Terminology\n## Goal\n## Qualification Process Overview\n## Document Structure\n## Related Publications\n## QSA Company Application Process\n## Additional Information Requests\n# QSA Company Business Requirements\n## Business Legitimacy\n## Independence\n## Insurance Coverage\n## QSA Company Fees\n## QSA Agreement\n# QSA Capability Requirements\n## QSA Company – Services and Experience\n## QSA Employee – Skills and Experience\n## Code of Professional Responsibility\n# QSA Administrative Requirements\n## Contact Person\n## Background Checks\n## Internal Quality Assurance\n## Protection of Confidential and Sensitive Information\n## Evidence (Assessment Workpaper) Retention\n## Security Incident Response\n# QSA List and Annual Re-Qualification\n## QSA List\n## Annual Re-Qualification\n# Assessor Quality Management Program\n## QSA Audit Process\n## QSA Quality Remediation Process\n## QSA Revocation Process\n# Appendix A - QSA Agreement\n# Appendix B - Insurance Coverage\n# Appendix C - QSA Company Application\n# Appendix D - QSA Employee Application","[{\"question\":\"What is the purpose of the QSA Qualification Requirements document?\",\"answer\":\"It defines the necessary qualifications for security companies and their employees to be qualified by PCI SSC to perform PCI DSS Assessments.\"},{\"question\":\"What is a QSA Company and why is it important?\",\"answer\":\"A QSA Company is an independent security organization qualified by PCI SSC to validate an entity’s adherence to PCI DSS requirements. Its quality and consistency help ensure cardholder data is adequately protected.\"},{\"question\":\"Which requirements are addressed for QSA qualification?\",\"answer\":\"The document covers QSA company business requirements, capability requirements for companies and employees, and administrative requirements, including evidence retention and security incident response.\"}]","PCI Data Security Standard - QSA Qualification Requirements - Version 2.0 | DOCX",20]