Why does PCI DSS require independent penetration testing instead of internal testing?

PCI DSS expects testing to be performed by qualified, independent professionals to ensure objectivity and accurate validation of security controls. Independent testing provides credible evidence for assessors and helps organizations avoid conflicts of interest that could weaken compliance findings.