Qualified Security Assessor program
E192649
The Qualified Security Assessor program is a PCI Security Standards Council initiative that certifies organizations and individuals to assess and validate merchants’ and service providers’ compliance with PCI Data Security Standards.
All labels observed (2)
| Label | Occurrences |
|---|---|
| Qualified Security Assessor | 2 |
| Qualified Security Assessor program canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T1711651 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Qualified Security Assessor program Context triple: [PCI Security Standards Council, managesProgram, Qualified Security Assessor program]
-
A.
Safety Management Certificate
The Safety Management Certificate is an international maritime document issued to a ship to verify that its company and onboard management operate in compliance with the International Safety Management (ISM) Code’s safety and environmental protection standards.
-
B.
Accredited Education Institutes program
The Accredited Education Institutes program is a global network of centers recognized by the American College of Surgeons for providing high-quality, simulation-based surgical education and training.
-
C.
Security Industry Authority
The Security Industry Authority is the United Kingdom’s statutory regulator responsible for licensing and overseeing the private security industry.
-
D.
SEAL Qualification Training
SEAL Qualification Training is an intensive, months-long advanced training course that prepares and certifies candidates as fully qualified U.S. Navy SEAL operators after they complete initial selection.
-
E.
Certified Software Development Professional
Certified Software Development Professional is an advanced, internationally recognized credential that validates a software engineer’s mastery of professional software development practices, principles, and ethics.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Qualified Security Assessor program Target entity description: The Qualified Security Assessor program is a PCI Security Standards Council initiative that certifies organizations and individuals to assess and validate merchants’ and service providers’ compliance with PCI Data Security Standards.
-
A.
Safety Management Certificate
The Safety Management Certificate is an international maritime document issued to a ship to verify that its company and onboard management operate in compliance with the International Safety Management (ISM) Code’s safety and environmental protection standards.
-
B.
Accredited Education Institutes program
The Accredited Education Institutes program is a global network of centers recognized by the American College of Surgeons for providing high-quality, simulation-based surgical education and training.
-
C.
Security Industry Authority
The Security Industry Authority is the United Kingdom’s statutory regulator responsible for licensing and overseeing the private security industry.
-
D.
SEAL Qualification Training
SEAL Qualification Training is an intensive, months-long advanced training course that prepares and certifies candidates as fully qualified U.S. Navy SEAL operators after they complete initial selection.
-
E.
Certified Software Development Professional
Certified Software Development Professional is an advanced, internationally recognized credential that validates a software engineer’s mastery of professional software development practices, principles, and ethics.
- F. None of above. chosen
Statements (48)
| Predicate | Object |
|---|---|
| instanceOf |
PCI SSC program
ⓘ
certification program ⓘ |
| administeredBy | PCI Security Standards Council ⓘ |
| appliesTo |
merchants
ⓘ
service providers ⓘ |
| assessmentType | third-party security assessment ⓘ |
| certifies |
Qualified Security Assessor companies
ⓘ
Qualified Security Assessor individuals ⓘ |
| documentation |
QSA program
ⓘ
surface form:
QSA Program Guide
QSA Qualification Requirements ⓘ |
| focusesOnStandard |
PCI DSS
ⓘ
surface form:
PCI Data Security Standard
|
| geographicScope | global ⓘ |
| governsActivity |
onsite review of cardholder data environment
ⓘ
testing of PCI DSS security controls ⓘ |
| governsRole |
Qualified Security Assessor program
self-linksurface differs
ⓘ
surface form:
Qualified Security Assessor
|
| hasAbbreviation | QSA program ⓘ |
| hasEligibilityCriterion |
employer is a PCI SSC-approved QSA company
ⓘ
information security experience ⓘ knowledge of payment card industry ⓘ |
| hasParticipantType |
PCI SSC training attendee
ⓘ
QSA company ⓘ QSA employee ⓘ |
| industryDomain | payment card security ⓘ |
| objective |
to improve security of cardholder data
ⓘ
to provide consistent PCI DSS assessments ⓘ |
| output |
Attestation of Compliance
ⓘ
Report on Compliance ⓘ |
| purpose | to qualify assessors to evaluate PCI DSS compliance ⓘ |
| regulatoryContext | card brand PCI programs ⓘ |
| relatedProgram |
Approved Scanning Vendor program
ⓘ
Internal Security Assessor program ⓘ Payment Application Qualified Security Assessor program ⓘ |
| requires |
adherence to PCI SSC QSA Qualification Requirements
ⓘ
annual requalification ⓘ independence from assessed entities ⓘ ongoing continuing professional education ⓘ organizational quality assurance processes ⓘ passing PCI SSC qualification exams ⓘ training by PCI Security Standards Council ⓘ |
| requiresComplianceWith | PCI SSC Code of Professional Responsibility ⓘ |
| scopeIncludes |
assessment of PCI DSS controls
ⓘ
validation of PCI DSS compliance ⓘ |
| supportsProcess |
PCI DSS compliance validation
ⓘ
on-site PCI DSS assessments ⓘ |
| usedBy |
acquiring banks
ⓘ
large merchants ⓘ payment card brands ⓘ payment processors ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Qualified Security Assessor program Description of subject: The Qualified Security Assessor program is a PCI Security Standards Council initiative that certifies organizations and individuals to assess and validate merchants’ and service providers’ compliance with PCI Data Security Standards.
Referenced by (3)
Full triples — surface form annotated when it differs from this entity's canonical label.
this entity surface form:
Qualified Security Assessor
Qualified Security Assessor program
→
governsRole
→
Qualified Security Assessor program
self-linksurface differs
ⓘ
this entity surface form:
Qualified Security Assessor