---
id: 8293
title: "Why does one QSA pass me and another would not?"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/network-pentesting/why-does-one-qsa-pass-me-and-another-would-not/"
published_at: "2013-04-11T00:00:00Z"
tags: ["vulnerability-management", "compliance", "audit", "pci", "qsa", "risk-acceptance"]
phying_url: "https://phying.com/item/8293"
lang: en
---

# Why does one QSA pass me and another would not?

## Summary

A customer passed a PCI audit despite an accepted high-risk vulnerability, violating Requirement 6.5.6 (High findings must be fixed). QSA inconsistency carries fine and reputation risks.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2013-04-11T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/network-pentesting/why-does-one-qsa-pass-me-and-another-would-not/
- **Phying News:** https://phying.com/item/8293