Merchants and other organizations can currently go the PCI SSC's website for a feedback form, which asks about an assessor's technical skills and understanding of the PCI Data Security Standard, along with ethics questions such as whether the assessor implied that a particular commercial product or service was necessary for compliance.