Recent Updates RSS
The latest changes across all tracked PCI resources.
The countdown is on for this year’s North America Community Meeting! We’re thrilled to share an early look at some of the exceptional sessions coming your way in Fort …
This episode of Coffee with the Council is brought to you by our podcast sponsors, Feroot and Jscrambler.
Welcome to our podcast series, Coffee with the Council. …
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment …
We are excited to announce that the full agendas for the PCI SSC 2025 North America, Europe, and Asia-Pacific Community Meetings are now available! Participants can hear directly …
The Asia-Pacific Community Meeting welcomes Sharon Gai—Author, Keynote Speaker, AI Expert, and Retail Innovation Leader. Sharon’s address, “The Future...
An exciting keynote awaits at the Europe Community Meeting, featuring Bernie Collins, F1 Analyst and former Head of Race Strategy for the Aston Martin...
The North America Community Meeting’s keynote speaker is Dr. Reed Timmer, a renowned extreme meteorologist and storm chaser. Dr. Timmer has spent his ...
PCI DSS does not define minimum or maximum times for how long cardholder data may be stored. PCI DSS Requirement 3.2.1 specifies that a data retention and disposal policy must …
PCI DSS Requirement 10.4.1 defines several events and system types that require daily log reviews, but Requirement 10.4.2 allows the organization to determine the log review frequency for all other …
No, PCI DSS Requirement 9.5 does not require devices to be fixed in place or physically attached to a surface. Requirement 9.5 and its three sub-requirements address three areas of …
Yes. Using strong cryptography to hash the password meets the intent of the PCI DSS Requirement 8.3.2, which requires that all authentication factors be rendered unreadable during transmission and storage …
PCI DSS requirements apply to all system components, unless it has been verified that a requirement is not applicable for a particular system. Decisions about the applicability of PCI DSS …
Masking is addressed in PCI DSS Requirement 3.4.1, whereas truncation is one of several options specified to meet PCI DSS Requirement 3.5.1.
Requirement 3.4.1 relates to the protection of …