Payment Card Industry (PCI) Qualified Security Assessors (QSAs) get to see the full range of the good, the bad, and the ugly of PCI compliance and security regimes. Security is the name of the game, but often senior leadership loses sight of that and looks at compliance as a challenge rather than an opportunity to improve protection. Management needs to remember why the standard exists in the first place, QSAs say the organizations that come at PCI positively reap the most benefits.”]
Source: https://www.darkreading.com/compliance/qsas-share-what-drives-improved-pci-practices