Become a 3DS Assessor
The PCI Security Standards Council operates a qualification program for QSA companies seeking to become 3DS Assessors, and to be re-certified each year. Only 3DS Assessors certified by the PCI Security Standards Council are qualified to assess compliance to the PCI 3DS Core Security Standard.
To qualify as a prospective 3DS Assessor company, a QSA Company must submit a signed 3DS Addendum Agreement (Appendix A in the 3DS Core Qualification Requirements).
The Process of Becoming a 3DS Assessor
Step 1 – Application
Interested QSA Companies must first contact the 3DS Program Manager at 3DS@pcisecuritystandards.org for access to submit an executed 3DS Assessor Addendum to PCI via the PCI Portal. The QSA Company can then proceed to submit applications for QSAs to become 3DS Assessors.
The Primary Contact can review the 3DS Core Qualification Requirements to ensure the applicant has the required qualifications for the 3DS program. All application materials must be submitted electronically via the PCI Portal. Applicants should submit their request for access to the forms on the secure portal by sending an e-mail to 3DS@pcisecuritystandards.org, attention “Program Manager”. Please note that submission of the application materials will only be accepted via the portal and will not be accepted by e-mail or mail
The Council will review the application materials and will communicate with the QSA Company to address any issues or lack of information. When the application is complete, the prospective 3DS Assessor Company will be invited to schedule training for its employees.
Step 2 – Training
Step 3 - Enrollment
To ensure that security assessments are carried out at the highest levels of quality and professionalism, the PCI Security Standards Council encourages the payment brands and other entities to submit 3DS Feedback Forms, which will be evaluated by the Council’s Quality Assurance Working Group. If a 3DS Assessor is judged to be deficient in its audit efforts, the Council will engage in dialog to recommend measures for improvement. If improvement is not deemed sufficient, the result could be disqualification for the 3DS Assessor and removal from the 3DS program.