Secure SLC Report on Compliance (ROC) Template
Updated version published, replaces version from
Recent Updates RSS
The latest changes across all tracked PCI resources.
Secure SLC Attestation of Compliance (AOC)
Updated version published, replaces version from
Secure SLC Program Guide
Updated version published, replaces version from
Secure SLC Standard Summary of Changes
Secure SLC Standard
Updated version published, replaces version from
PCI Security Standards Council Publishes Version 1.1 of Secure Software Lifecycle (SLC) Standard and Program
PCI Secure SLC Program Expands Vendor Eligibility with Version 1.1
via unifiedguru.com
PCI Security Standards Council Announces 2021-2022 Advisory Board
Does PCI DSS define which versions of TLS must be used?
No. However, PCI DSS does not consider SSL or early TLS to be strong cryptography. Transport Layer Security (TLS) is a protocol that encrypts traffic between two endpoints to provide …
HSM Security Requirements Modifications: Summary of Changes
Updated version published, replaces version from
PCI Security Standards Council Bulletin: Implementation Dates for Key Block Equivalence
Can a PCI 3DS Assessment result in a finding of "Compliant" if some requirements are not tested?
No. The PCI 3DS Attestation of Compliance (AOC) can only document a "Compliant" finding if all requirements are tested and found to be "In Place" or a combination of "In …
Is an EMVCo Letter of Approval required prior to conducting a PCI 3DS Assessment?
No, an EMVCo Letter of Approval (LOA) is not required for a PCI 3DS Assessor to perform an assessment to the PCI 3DS Core Security Standard. If an EMVCo LOA …
What types of 3DS components are in scope for Requirement P2-7 in the PCI 3DS Core Security Standard?
Requirements P2-7.1 and P2-7.2, which relate to data center and CCTV security, apply to 3DS Directory Server (DS) and 3DS Access Control Server (ACS) systems. As noted in the Overview …
Can a 3DS entity outsource the hosting and management of its HSMs to a third-party service provider?
Yes, a 3DS entity may choose to outsource the hosting and management of its HSM infrastructure to a third-party service provider as long as all applicable requirements are met. The …