Click here to access the main News page and view a listing of all available articles.

PCI Council to Launch Assessor Quality Assurance Program
www.SearchSecurity.com - 06/11/08

A quality assurance program for PCI assessors is slated to be rolled out in September by the PCI Security Standards Council (PCI SSC). The council maintains the PCI standards and oversees training and certification of Approved Scanning Vendors (ASVs) and Qualified Security Assessors (QVAs). PCI Security Vendors Alliance research director David Taylor says the quality assurance (QA) program could help resolve quarrels between merchants, assessors, card brands, and banks, adding that acquiring banks that must guarantee the PCI compliance of their merchant members are frequently caught in the middle of disputes over assessments. Retailers and other organizations can access feedback forms that inquire about an assessor's technical skills and comprehension of the PCI Data Security Standard at the PCI SSC's Web site. The form also provides ethics questions such as whether the assessor intimated that a specific commercial product or service was required for compliance. The PCI SSC's Glenn Boyet says the council intends to recruit a pair of QA staffers, and a job description for a senior QA analyst on the council's site says the staffer will cooperate with ASVs and QVAs to verify their findings and "resolve misunderstandings resulting from the reviews."

Click here to access the main News page and view a listing of all available articles.