Governance. Risk. Compliance. Cybersecurity.

Audit & Assurance

Qualified Security Assessor (QSA)

PCI SSC-accredited individual or firm authorised to perform PCI DSS Report on Compliance audits.

Level 1 PCI DSS validation requires a QSA-signed RoC and Attestation of Compliance. MAST works with the QSA firm of the client's choice — we do not act as QSA to preserve independence.