Frosty Assessor

Working with a good QSA can be a useful way to validate one's PCI controls and assumptions. They aren't just a speed bump toward getting your ROC. As with all things, though, there are good assessors, and there are bad assessors.

---

Frosty Assessor

Frosty Assessor
Was a nosy, noisome soul.
With his DSS and his calipers
And a soul as dark as coal.

Audit the people
To ensure that they comply.
If they don't, he'll know
And your biz won't go.
You'll be left outside to cry.

There must have been some documents
That covered all the things.
'Cause when he looked at evidence,
He began to dance and sing.

Frosty Assessor
Gave a passing grade that day.
Now for PCI,
And we just won't lie,
We're compliant, yeah, oh, yay!

Bumpity-bump-bump!
Bumpity-bump-bump!
Watch the spreadsheets go.
Bumpity-bump-bump!
Bumpity-bump-bump!
Through every rule he'll mow!