An assessor must provide which of the following to their client at the start of every assessment?

An assessor must provide which of the following to their client at the start of every assessment?
A . CPSA Feedback Form
B . Quality Assurance Manual
C . Attestation of Compliance
D . Vendor Release Agreement

Answer: B

Explanation:

According to the Card Production Security Assessor (CPSA) Qualification Requirements, an assessor must provide their client with a Quality Assurance Manual at the start of every assessment. The Quality Assurance Manual is a document that describes the assessor’s methodology, procedures, and quality control measures for conducting assessments. The manual must be consistent with the CPSA Program Guide and the PCI Card Production and Provisioning Security Requirements. The manual must also include a description of the assessor’s roles and responsibilities, the assessment scope and objectives, the assessment plan and timeline, the assessment report format and content, and the assessor’s conflict of interestpolicy.

References: Card Production Security Assessor (CPSA) Qualification Requirements, v1.0, April 2019, page 111

Reference: [Reference: https://listings.pcisecuritystandards.org/documents/Card_Production_Security__Assessor_(CPSA)_Quali fication_Requirements__v1.0_Apr__2019.pdf, ]

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments