Provision of QSA Services

This is an ongoing requirement while the agency takes card payments from customers. This service provides annual assurances that we are compliant to Payment Card Industry Data Security Standard PCI DSS as mandated by the Card Schemes and Merchant Acquirer. The QSA will be on site for up to 10 days a year while assessing our compliance to the PCI DSS.

DVLA require QSA to provide PCI - DSS deliverables, support, advice and guidance. The DVLA anticipate up to 10 days annually (with some flexibility built in) from the QSA for a term of 2 + 1 year.