Today’s press release from the council announced efforts towards easing the resource constraints felt by QSA Companies.
The PCI SSC is developing the Associate QSA certification with the goal of attracting new cyber talent to the program and easing the resource constraints felt by QSA Companies. This project is a first step in a phased initiative to evolve the QSA program and ensure its sustainability and quality in a changing payment environment. Its explained in the blog post here. There is also a preliminary FAQ on the program available here.
According to the FAQ, the program will be developed and implemented in conjunction with a dedicated industry task force. The task force will play a critical role in the success of this initiative by reviewing and providing specific feedback on the new program as it is being developed. It is slated to kick off in March 2017 and complete its mandate by July 2017. Implementation of the new Associate of QSA role is planned for early 2018.
Associate QSAs will work under the supervision of fully experienced QSAs to get the range of experience needed to perform a PCI Data Security Standard (PCI DSS) assessment.
Ad below this line: