PCI Guru

We got reminded once again about the silliness that is SAQ A as the Council’s FAQ of the Month for August 2026 Assessor Newsletter is FAQ #1588, titled ‘How does an e-commerce merchant meet the SAQ A eligibility criteria for scripts?’

Every now and then I come across a piece of work product that just provides an example of what not to do.

I have been guilty in the past of agreeing to this and have always regretted it.

“We have totally outsourced our eCommerce site to a third party service provider.

Just a quick note about merchant identification numbers, aka MID.

On Wednesday, June 11, 2026, the PCI SSC released an Information Supplement for Compensating Controls and the Customized Approach.

In the May 2026 Assessor Newsletter, the FAQ of the Month portion of the newsletter focused on FAQ #1588.

Here is one that is new.

This subject came up the other day in a conversation with an ISA who wanted to check if they were on the correct path.

This is a post for all the recruiters out there searching for a “contract QSA”.