- 5 Questions About PCI DSS v4.0
In this interview with the Council’s Global Head of Standards, Emma Sutcliffe, we address key questions about the upcoming request for comments (RFC) on a first draft of PCI Data Security Standard Version 4.0 (PCI DSS v4.0). PCI DSS v4.0 is a key discussion topic at ... read more - Executive Director Q&A: PCI SSC Strategic Framework
In his keynote presentation at the 2019 PCI Community Meeting this week in Vancouver, Executive Director Lance Johnson introduced the Strategic Framework that is guiding PCI SSC activities to achieve its mission and support the needs of the global payments industry. In this interview, we cover ... read more - Understanding the PCI Software Security Framework: New Educational Resources
Ahead of the North America Community Meeting this week in Vancouver, PCI SSC has published new educational resources on the PCI Software Security Framework (SSF). The SSF At-a-Glance and Transitioning from PA-DSS to SSF Resource Guide provide key information to increase awareness and understanding of the ... read more - Closing the Gender Gap in Payment Security
September 1, 2019 is International Women in Cyber Day. On the blog, we profile Emma Sutcliffe, Head of Standards for the PCI Security Standards Council and member of the PCI SSC senior leadership team. ... read more - Key Blocks 103
The PCI PIN Standard requires implementation of Key Blocks. On the blog, the third of the series, we cover basic questions about the 3 phases for implementing the Key Blocks requirements. On our first blog, Key Blocks 101, we covered basic questions about this security method ... read more - Regional Update: PCI Latin America Forum in Brazil
The PCI SSC Latin America Forum took place this week in São Paulo, Brazil, gathering more than 350 payment security practitioners from Brazil and Latin America to discuss the latest in payment security and standards. Here we talk with Carlos Caetano, PCI SSC Associate Regional Director ... read more - Key Blocks 102
The PCI PIN Standard requires implementation of Key Blocks. On the blog, we cover basic questions about the applicability of this requirement. This blog is the second in a series on the Key Block requirement. On our first blog post in the series, Key Blocks 101, ... read more - 3 Things to Know about PCI DSS v4.0 Development
PCI SSC stakeholders play an important role in the ongoing evolution of the PCI Data Security Standard (PCI DSS). Here we cover three key things to know about the development of PCI DSS version 4.0 and how to be part of it. ... read more - The Threat of Online Skimming to Payment Security
How the emerging threat of online skimming presents a great threat to the payment security community. On the blog, we cover basic questions with PCI SSC Chief Technology Officer Troy Leach about a newly released bulletin by the PCI SSC on the topic of digital skimming ... read more - Information Supplement: Best Practices for Maintaining PCI DSS Compliance
Information Supplement: Best Practices for Maintaining PCI DSS Compliance provides updated guidance and practical recommendations for dealing with the challenges associated with maintaining PCI DSS compliance. ... read more - 5 Common Questions About Continuing Professional Education Credits
Continuing professional education is an important component of PCI SSC Qualification. Staying up to date with the latest knowledge, techniques, and insights helps support the Program Participant’s ability to effectively conduct the tasks and responsibilities associated with a PCI SSC Qualification. ... read more - Request for Comments: Contactless Payments on COTS Standard
From 22 July to 20 August 2019, PCI SSC stakeholders can participate in a Request for Comments (RFC) on the draft PCI Contactless Payments on COTS (CPoC) Standard. RFC periods are avenues for PCI SSC stakeholders to provide feedback on existing and new PCI Security Standards. ... read more - PCI Software Security Framework FAQS: PA-DSS Impact and Transition
New FAQs address key questions on the transition from PA-DSS to the PCI Software Security Framework. ... read more - NIST Mapping
Mapping PCI DSS v. 3.2.1 to the NIST Cybersecurity Framework v. 1.1 How meeting PCI DSS requirements can help toward achieving Framework outcomes for payment environments. On the blog, we cover basic questions about the newly released Mapping of PCI DSS to the NIST Cybersecurity ... read more - FAQ: Can organizations use alternative password management methods to meet PCI DSS Requirement 8?
Did you know that the Frequently Asked Questions (FAQ) resource on the PCI SSC website is updated regularly to address common questions the PCI SSC receives from stakeholders? This searchable tool includes a library of questions and answers on a variety of topics across PCI Security Standards ... read more