PA-QSAs are qualified by which entity to assess payment applications against PA-DSS?

PA-QSAs are qualified by which entity to assess payment applications against PA-DSS?

• A. PCI Security Standards Council
• B. National Vulnerability Database
• C. Open Web Application Security Project
• D. OS vendors

Answer: (A)

PA-QSAs are qualified by the PCI Security Standards Council. This council administers and accredits the PA-QSA program, certifying individuals and Approved PA-QSA companies to conduct PA-DSS assessments and verify that payment applications meet the standard. The other organizations don’t oversee PA-DSS assessments: the National Vulnerability Database tracks vulnerabilities, OWASP provides security guidance, and OS vendors supply operating systems.

PA-QSAs are qualified by the PCI Security Standards Council. This council administers and accredits the PA-QSA program, certifying individuals and Approved PA-QSA companies to conduct PA-DSS assessments and verify that payment applications meet the standard. The other organizations don’t oversee PA-DSS assessments: the National Vulnerability Database tracks vulnerabilities, OWASP provides security guidance, and OS vendors supply operating systems.