PQSS 1.0 self-assessment checklist
An organization meets PQSS 1.0 for a period if it can answer yes to all ten questions for that period, with records to show it.
There is no PQSS certification. Nobody, including the publisher, audits or approves an assessment. Your answers stay in this browser and are not sent anywhere.
The ten questions
- Is every in-scope placement in the register, with ID, location, expected content and tier, and was every gone placement restored or marked removed within 30 days? Req. 1.1, 1.2, 3.7
- Has the register been checked against reality in the last 12 months? Req. 1.3
- Was every placement inspected in person within its tier's period? Req. 2.1, 3.1
- Was every reported concern and every missed placement inspected within its deadline? Req. 2.4, 2.6
- Did every inspection use an inspection reader, plus a physical check? Req. 3.2, 3.3
- Was every mismatch removed, followed up and reported as required? Req. 4.1, 4.3
- Are missed inspections recorded as missed? Req. 6.2
- Are records kept for 12 months or more? Req. 6.4
- Is there a named PQSS lead, and were inspectors briefed? Req. 7.1, 7.2
- Did the PQSS lead review the program in each quarter? Req. 7.3
Tick each question you can answer yes, with records to show it.
The permitted statement
If every answer is yes for the period, you may say so in these words, and only these:
We self-assess against PQSS 1.0, the Public QR Security Standard. Last assessed: [date].
Don't call yourself "PQSS certified" or suggest a third party has verified it.