CHALLENGE Qualpay needed to achieve PCI compliance and ensure its cloud-based payment platform was secure. However, taking a security-first approach couldn’t put its deadline at risk or overburden internal resources. After its previous Qualified Security Assessor (QSA) firm replaced personnel mid-engagement and travel expenses grew too high, Qualpay started looking for a QSA firm with cloud expertise that would assign a senior-level assessor for the entire engagement and would provide support as its infrastructure and environment evolved. “Our previous vendor was based in Atlanta, which meant travel expenses for on-site visits were quite high,” explained Qualpay’s CIO. “During our short engagement with that vendor, our original assessor left the company, leaving us in the care o

Join for free to read