SOFTWARE SECURITY FRAMEWORK (SSF) ASSESSOR FEEDBACK

Software Security Framework (SSF) Assessor companies are independent security organizations that have been qualified by the PCI Security Standards Council to validate a vendor's payment software and/or to evaluate a vendor's software lifecycle.

Secure Software Assessors are employed by an SSF Assessor Company and have satisfied and continue to satisfy all applicable requirements to perform Secure Software Assessments.

Secure Software Lifecycle (SLC) Assessors are employed by an SSF Assessor Company and have satisfied and continue to satisfy all applicable requirements to perform Secure SLC Assessments.

Please use this form to provide feedback about Software Security Framework Assessors and their work product. Information collected from the Feedback Form will be held in strict confidence and used for the sole purpose of improving the quality of service provided by these assessors.

Software Security Framework Assessor Feedback Form

Form Submitter Name

Form Submitter Email Address

Form Submitter To Name

Form Submitter To Email Address

Fields marked * are required.

Please provide the following information about the assessor for whom you are providing feedback.

Name of individual assessor *:

Name of assessor company *:

Assessment Type *:

Dates of assessment :

From / /

To / /

Please provide the following information about you and your company. This information is optional.

Name:

Company Name:

Email Address:

Phone Number:

Entity Type:

Please Explain:

Please answer Y/N to each question. For all N responses, please provide an explanation in the box provided.

Question

Response

Comments

1. Did the assessor perform responsibly, diligently, objectively and in the best interest of the customer?

2. Did the assessor respect and safeguard confidential, proprietary, or otherwise sensitive information during the course of professional activities?

3. Did the assessor operate with integrity, honestly and accurately delivering information and guidance and avoiding activities that could constitute a conflict of interest?

4. Additional comments