Industry Experts to Gather in Amsterdam to Address Evolving Payment Security Challenges
Recent Updates RSS
The latest changes across all tracked PCI resources.
Beware of PCI DSS Compliance Certificates
The PCI Security Standards Council (PCI SSC) is often asked whether compliance certificates are acceptable to demonstrate an organization’s validation to the PCI Data Security Standard (PCI DSS).
According …
Meet the Council’s New Regional Director, Europe
The PCI Security Standards Council (PCI SSC) is pleased to welcome its newest team member, Úna Dillon, Regional Director, Europe. As Regional Director, Úna serves as the primary liaison with …
Can unencrypted PANs be sent over e-mail, instant messaging, SMS, or chat?
No. PCI DSS Requirement 4.2.2. prohibits the sending of unprotected primary account numbers (PANs) via end-user messaging technologies, whether sent internally or over public networks. E-mail, instant messaging, SMS, and …
Are entities allowed to request that cardholder data be provided over end-user messaging technologies?
PCI DSS does not prevent the use of end-user technologies (such as email, SMS, chat, etc.) to request or receive cardholder data. However, if an end-user messaging technology is used …
Does PCI DSS allow faxing of payment card numbers?
Any cardholder data that is stored, processed, or transmitted must be protected in accordance with PCI DSS. If faxes are sent or received via modem over a traditional PSTN phone …
Authentication Guidance - A Summary
Version: Authentication%20Guidance%20A%20Summary%20Infographic
Files: 7 files in 1 version
added
Files: 7 files in 1 version
added
Authentication Guidance
Version: Authentication-Guidance
Files: 9 files in 2 versions
Document unarchived; added
Files: 9 files in 2 versions
Document unarchived; added
PCI Security Standards Council Establishes the First India-South Asia Regional Engagement Board for 2025-2026
Card Production AOC – Logical
Updated version published, replaces version from
PCI SSC Releases New Guidance on Authentication and Cryptography
Authentication and cryptography are two essential security controls that protect sensitive data and systems. Authentication helps verify who can access information, while cryptography protects data whether it is stored or …
Cryptography Guidance
Welcome Our Newest Associate Participating Organizations
We are pleased to welcome the newest organizations that have joined as Associate Participating Organizations of the PCI Security Standards Council (PCI SSC). These organizations play a crucial role in …
PTS PIN Technical Frequently Asked Questions
Updated version published, replaces version from
12 videos published
12
Lauren Holloway and John Bloomfield: Spe..., Jake Marcinko: Speaking at the 2025 Nort..., GM Sectec: Sponsoring at the 2025 North ... and 9 more