P2PE Program Guide
Version: PCI-P2PE-Program-Guide-v3.1
Files: 7 files in 7 versions
added
Files: 7 files in 7 versions
added
Recent Updates RSS
The latest changes across all tracked PCI resources.
Can the "Compliant but with Legal exception" option in the AOC be used to identify where a testing procedure could not be performed due to a legal constraint?
No. The "Compliant but with Legal exception" option in Part 3 of an Attestation of Compliance (AOC) allows an entity to document that they could not implement one or more …
India’s Exclusive Payment Data Security Forum Focuses on Securing Payment Data in The Pandemic Era
PCI Security Standards Council Bulletin: Revisions to the Implementation Dates and Scope for PCI P2PE Security Requirement 32-9
What is the meaning of ?initial assessment? in PCI DSS?
An initial assessment is an entity?s first formal PCI DSS assessment that results in the submission of a compliance validation document. Examples of validation documents include an Attestation of Compliance …
PCI Security Standards Council Bulletin: Revisions to the Implementation Dates and Scope for PCI PIN Security Requirement 32-9
UnionPay Joins PCI SSC as Strategic Member
Are P2PE Products (P2PE Solutions, P2PE Components, P2PE Applications) on the P2PE Expired Listings still considered "validated" per the P2PE Program Guide?
No, they are no longer considered validated. However, please contact the payment brands regarding the use of P2PE Solutions on the P2PE Expired List (How do I contact the …
Two Leading Cybersecurity Organizations Issue Joint Bulletin on Threat of Account Testing Attacks
PCI Security Standards Council Bulletin: The Threat of Account Testing to Payment Security
PCI Security Standards Council Provides Insights Into Evolution of the PCI Data Security Standard at Annual Community Meeting
Two Leading Industry Leading Organizations Issue Joint Bulletin on Threat of ATM Cash-Outs
PCI Security Standards Council Bulletin: The Threat Of ATM Cash-Outs Payment Security
If a P2PE Solution is shown as red or orange on PCI's list of Validated P2PE Solutions, does the solution meet the eligibility criteria for SAQ P2PE?
Yes, P2PE solutions with dates shown as red or orange are considered validated P2PE solutions and meet the eligibility criteria for SAQ P2PE. Dates shown in colors on the PCI …
If a P2PE Solution is on PCI's list of Point-to-Point Encryption Solutions with Expired Validations, does the solution meet the eligibility criteria for SAQ P2PE?
P2PE solutions on the PCI list of Point-to-Point Encryption Solutions with Expired Validations are no longer considered "validated" per the P2PE Program Guide. Because these P2PE solution providers did not …