Compliance Glossary

A QSA, or Qualified Security Assessor is an AICPA (American Institute of Certified Public Accountants) trained professional. They assess your organization’s systems and controls as required by a SOC 2 standard. 

QSAs are responsible for conducting independent assessments of your organization and preparing a report based on the findings and observations. They would review your policies, procedures, and documentation related to the systems and processes. The report is meant to assure customers and stakeholders that your organization’s controls are designed and operate efficiently to maintain the security and confidentiality of customer data.