How do I contact the payment card brands?
Contact the applicable payment brands and/or acquirer (merchant bank) for more information about PCI compliance programs.
Contact details for the PCI SSC Participating Payment Brands are provided below:
…
Recent FAQ Changes RSS
Latest changes to PCI SSC frequently asked questions.
What is the definition of "merchant"?
For the purposes of the PCI DSS, a merchant is defined as any entity that accepts payment cards bearing the logo of a PCI SSC Participating Payment Brand as payment …
Can PFIs provide reports to their clients before sending the report to the affected payment brands?
No. It is not acceptable for reports (draft or final) to be issued to clients, acquirers, issuers, or other parties for review/amendment before being sent to payment brands and/or acquirers. …
What are acceptable formats for truncation of primary account numbers?
This FAQ reflects updates as of November 2021 for acceptable truncation formats for different PAN / BIN lengths.
Acceptable truncation formats vary according to PAN length and Participating Payment …
What is the process to initiate a software evaluation to the PCI Secure Software Standard?
Vendors that want to have their software assessed to the PCI Secure Software Standard initiate the process by engaging a qualified Secure Software assessor from the PCI SSC list of …
Is software-as-a-service (SaaS) eligible for Secure Software Standard validation and listing?
Yes, if the software in question meets all stated eligibility criteria in effect at the time of submission, software-as-a-service may be validated to the Secure Software Standard and listed on …
Are currently listed PA-DSS payment applications required to be revalidated using the Secure Software Standard?
After 28 October 2022, all previously validated PA-DSS applications will be expired and moved to the "Acceptable Only for Pre-existing Deployments" list on the PCI SSC website. Payment application vendors …
Who is qualified to perform assessments to the PCI Secure SLC Standard?
Secure SLC Assessors are qualified by PCI SSC to validate software vendor adherence to the Secure SLC Standard.Qualified Secure SLC Assessors will have the Assessment Type of "Secure SLC" noted …
What is the process for PCI Secure SLC Qualification?
Vendors that want to have their software development processes assessed to the Secure SLC standard may initiate the process by engaging a qualified Secure SLC assessor from the PCI SSC …
What software is eligible for validation to the PCI Secure Software Standard?
The eligibility criteria for software validation to the PCI Secure Software Standard is defined in the Secure Software Program Guide, available in the Document Library. Whether an entity is …