Does PCI P2PE v2 allow for partial assessments of third parties with services that will be used in one or more P2PE solutions?
→
Reinstated FAQs
38 FAQs have been deleted from the PCI SSC website and later restored.
I'm a small merchant who has limited payment card transaction volume. Do I need to be compliant with PCI DSS? If so, what is the deadline?
→
How does PCI DSS Requirement 6.4.3 apply to 3DS scripts called from a merchant check-out page as part of 3DS processing?
→
Do all PCI DSS requirements apply to every system component?
→
Is a merchant website still in scope for PCI DSS if it meets all the criteria for SAQ A?
→
If a merchant is using a payment application listed as "acceptable only for pre-existing deployments", is the merchant allowed to install more copies of the application?
→
What type of assessor signatures are allowable for PCI SSC attestation documentation?
→
Are merchants allowed to request that cardholder data be provided over end-user messaging technologies?
→
Do PCI DSS Requirements 8.3.9 and 8.3.10.1 apply to all system components?
→
Is sampling allowed in PCI DSS v4.0?
→