Qualified Security Assessor (QSA) A Qualified Security Assessor (QSA) is someone the PCI SSC council has qualified to validate PCI DSS compliance assessments.