Recent Updates RSS
The latest changes across PCI SSC resources and EMVCo specifications.
The AI Exchange: Innovators in Payment Security Featuring SecurityMetrics
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment …
EMV® Terminal Type Approval – Level 2 – Test Cases
EMV® Terminal Type Approval – Contact Level 2 – Administrative Process
Contact Terminal Level 2 – Implementation Conformance Statement
TTA Bulletin n°292: Terminal L2 Test Plan Release 4.4d
TTA Bulletin nº 199: Contact Terminal Level 2 Type Approval Specific Approval and Restricted Renewal Rules
PCI SSC Publishes New Guidance on Compensating Controls and the Customized Approach
The PCI Security Standards Council (PCI SSC) has released a new information supplement, PCI DSS v4.x: Guidance for Compensating Controls and the Customized Approach. The document provides practical guidance …
Guidance for Compensating Controls and the Customized Approach
Version: PCI_DSS_v4.x%20Guidance-for-Comp-Controls-Cust-Approach
Files: 1 file in 1 version
Files: 1 file in 1 version
EMV® Level 3 (L3) Technical Bulletin n° 321 - Comment period ends 24 June 2026
Spotlight On: Dreamplug Technologies Private Limited (CRED), a New Principal Participating Organization
Welcome Dreamplug Technologies Private Limited, operating under the brand name CRED, a new Principal Participating Organization (PPO) at the PCI Security Standards Council! In this special spotlight edition of our …
TTA Bulletin n°293: Contact Terminal Level 2 Type Approval Contactless Product Type Approval Terminals not able to process transaction dates beyond January 19, 2038
If a merchant is using a payment application listed as 'acceptable only for pre-existing deployments', is the merchant allowed to install more copies of the application?
Compliance validation programs are managed by the individual payment brands, not by the PCI Security Standards Council. Payment brand validation programs may include whether certain applications must be PA-DSS validated, …
How do I reduce the scope of a PCI DSS assessment?
Network segmentation of, or isolating (segmenting), the cardholder data environment from the remainder of an entity's network is strongly recommended as a method that may reduce the scope of a …
Which PCI PTS point-of-interaction (POI) devices can be used in a validated P2PE solution?
The PCI P2PE Standard and Program require the use of a PTS-approved (non-expired) point-of-interaction (POI) device, which has been evaluated and approved via the PCI PTS program with SRED (secure …