Nov 12 2008
Double-check your QSA
I’m not sure if this is something I’d missed before, but you can look up you’re Qualified Security Assessor (QSA) and see if they’re in good standing. All you need is their last name and the name of their company and you can know for certain that they’re on the up and up and have had their annual training. This is something you should take the five minutes to do to check out the QSA’s who’ll be working with you. I don’t have specific examples, but I’ve heard rumors that there are some folks out there representing themselves to Level 3 and level 4 merchants as QSA’s when they’re not. Take the 5 minutes to verify your assessor, you owe it too yourself.
![[del.icio.us]](http://images.del.icio.us/static/img/delicious.small.gif){kind=small}
POST /qsa_lookup/index.html HTTP/1.1
Host: http://www.pcisecuritystandards.org
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.3) Gecko/2008092417 Firefox/3.0.3
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: https://www.pcisecuritystandards.org/qsa_lookup/index.html
Content-Type: application/x-www-form-urlencoded
Content-Length: 44
run=2&hash2=&name=%3Ciframe%3E&cert=&cmpy=-1