PCI Qualified Security Audit – Qualified Security Assessor (QSA) companies are independent security organizations that have been qualified by the PCI Security Standards Council to validate an entity’s adherence to PCI DSS. QSA employees are individuals who are employed by a QSA company and have satisfied, and continue to satisfy, all QSA requirements.