Candidates pass rigorous exams to achieve Qualified Security Assessor status

Candidates pass rigorous exams to achieve Qualified Security Assessor status

Secure payment specialist, The Logic Group is now authorised to conduct on-site audits validating a merchant’s adherence to the requirements of the Payments Card Industry Data Security Standard (PCI DSS).

To become a Qualified Security Assessor (QSA) The Logic Group’s suitability as an organisation was reviewed as part of a rigorous application process, before it received approval from the PCI Security Standards Council to put forward a number of individuals to take the QSA training course and exam. Having seen its payment security consultants gain passes, The Logic Group has now registered its intent to practice in Europe.

Robin Adams, director of security, fraud and risk management, who took the training course and subsequent exam, commented: “When implemented correctly, the requirements of the PCI DSS successfully protects merchants from data exposure and compromise. As a result, on-site PCI DSS audits performed by QSAs have become vital in today’s environment. How successfully an assessment is conducted can have a significant impact on the implementation of PCI measures and controls, which can be a costly and quite painful process for merchants, so it is a qualification that comes with significant responsibilities.”

Assessment controls strengthened

Adams added: “The quality, reliability, and consistency of a QSA’s work provide confidence that cardholder data is adequately protected. That is why the Security Standards Council is now taking a more stringent approach to ensuring that QSAs perform uniformly, recently introducing a much tougher audit regime for the QSAs themselves.”

As security payment specialists, The Logic Group team welcomed the tougher stance adopted by the Security Standards Council, and said it recognised the improved standards this brings to the industry.

Following an audit a QSA provides a Report of Compliance, which is now subject to review by the Security Standards Council, further tightening the controls and upholding the status of merchants, protecting customer data, in achieving PCI compliance.