Audit & Assurance
Qualified Security Assessor (QSA)
PCI SSC-accredited individual or firm authorised to perform PCI DSS Report on Compliance audits.
Level 1 PCI DSS validation requires a QSA-signed RoC and Attestation of Compliance. MAST works with the QSA firm of the client's choice — we do not act as QSA to preserve independence.