Hardware Security Module (HSM)
Updated version published, replaces version from
Recent Updates RSS
The latest changes across all tracked PCI resources.
What is a PCI SSC Participating Payment Brand?
A PCI SSC Participating Payment Brand is a payment brand that, as of the time in question, is then formally admitted as (or an affiliate of) a member of PCI …
Who are the founders of the PCI Security Standards Council?
The founders of the PCI Security Standards Council are American Express, Discover Financial Services, JCB, Mastercard, and Visa Inc.
Does PCI DSS apply to debit cards, debit payments, and debit systems?
Any payment card (credit, debit, prepaid, stored value, gift or chip) bearing the logo of a PCI SSC Participating Payment Brand may be subject to that brand's PCI compliance programs.Entities …
Does PCI DSS apply to virtual (electronic-only) PANs?
PCI DSS applies to all primary account numbers (PANs) that represent a PCI SSC Participating Payment Brand. This includes PANs that are only provided electronically (virtual PANs) as well as …
Does PCI DSS apply to one-time or single-use PANs?
PCI DSS applies to all primary account numbers (PANs) that represent a PCI SSC Participating Payment Brand. Whether a one-time PAN is in scope for PCI DSS will depend on …
Where do I direct questions about complying with PCI standards?
Each of PCI SSC?s Participating Payment Brand members (American Express, Discover, JCB International, Mastercard, UnionPay, and Visa) currently have their own PCI compliance programs for the protection of their affiliated …
Does PCI DSS apply to bank account data?
PCI DSS applies for the protection of cardholder data (PAN, cardholder name, service code and expiration date) and sensitive authentication data (full track data from the magnetic stripe or equivalent …
How do I contact the payment card brands?
Contact the applicable payment brands and/or acquirer (merchant bank) for more information about PCI compliance programs.
Contact details for the PCI SSC Participating Payment Brands are provided below:
…
What is the definition of "merchant"?
For the purposes of the PCI DSS, a merchant is defined as any entity that accepts payment cards bearing the logo of a PCI SSC Participating Payment Brand as payment …
Paving the way: Inspiring Women in Payments - A podcast featuring Coalfire
In this edition of our podcast, the PCI Security Standards Council is pleased to host a panel discussion featuring four women from Coalfire, a leading provider of IT advisory services …
Can PFIs provide reports to their clients before sending the report to the affected payment brands?
No. It is not acceptable for reports (draft or final) to be issued to clients, acquirers, issuers, or other parties for review/amendment before being sent to payment brands and/or acquirers. …
Paving the Way: Inspiring Women in Payments - A Q&A Featuring Amandeep Kaur
Amandeep Kaur was given a life-changing opportunity to leave her small village and move to the United Kingdom to stay with her aunt and uncle and study Information Security and …
Be On Alert This Holiday Season
In this blog we explore the challenges around security of payment data during the hectic holiday season and provide tips and best practices to help retailers better secure their payment …
What are acceptable formats for truncation of primary account numbers?
This FAQ reflects updates as of November 2021 for acceptable truncation formats for different PAN / BIN lengths.
Acceptable truncation formats vary according to PAN length and Participating Payment …