Guidance Document

8 Tips to Help Small Merchants Protect Payment Card Data During COVID-19

Latest version: PCI_COVID-19_Resource_Guide (updated )

Available in: Chinese, English, Japanese, Portuguese, Spanish

AT A GLANCE: Mapping PCI DSS to the NIST Cybersecurity Framework

Latest version: Mapping-PCI-DSS-to-NIST-Framework-At-a-Glance (updated )

Available in: English

ATM Security Guidelines

Latest version: PCI_ATM_Security_Guidelines_Info_Supplement (updated )

Available in: English

Accepting Mobile Payments with a Smartphone or Tablet

Latest version: accepting_mobile_payments_with_a_smartphone_or_tablet (updated )

Available in: English

At a Glance : Merchant POS Security

Latest version: Merchant%20POS%20Security%20EMV%20chip%20and%20PCI (updated )

Available in: English

At a Glance: Merchant Guide: Stepping up to EMV Chip with PCI

Latest version: Merchant_Guide_-_Stepping_Up_to_EMV_Chip_with_PCI_-v06 (updated )

Available in: English

At-a-Glance: RFC Process

Latest version: RFC_at_a_Glance (updated )

Available in: English

Authentication Guidance - A Summary

Latest version: Authentication%20Guidance%20A%20Summary%20Infographic (updated )

Available in: Chinese, English, French, German, Japanese, Portuguese, Spanish

Best Practices for Implementing a Security Awareness Program

Latest version: PCI_DSS_V1.0_Best_Practices_for_Implementing_Security_Awareness_Program (updated )

Available in: English

Best Practices for Maintaining PCI DSS Compliance

Latest version: v2.0 (updated )

Available in: English

Best Practices for Securing E-commerce

Latest version: best_practices_securing_ecommerce (updated )

Available in: English

Bulletin on Migrating from SSL and Early TLS

Latest version: Migrating_from_SSL_and_Early_TLS_-v12 (updated )

Available in: English

Common Payment Systems

Latest version: v3.0 (updated )

Available in: English

Connected-to Service Providers

Latest version: PCI-SSC-Connected-to-Service-Providers-Guidance (updated )

Available in: English

Cryptography Guidance

Latest version: 1.0 (updated )

Available in: Chinese, English, French, German, Japanese, Portuguese, Spanish

Devalue the Data

Latest version: PCI-CyberCrime-FinalR (updated )

Available in: English

EXECUTIVE BRIEF: Mapping PCI DSS to the NIST Cybersecurity Framework

Latest version: Mapping-PCI-DSS-to-NIST-Framework-Executive-Brief (updated )

Available in: English

Effective Daily Log Monitoring

Latest version: Effective-Daily-Log-Monitoring-Guidance (updated )

Available in: English

Glossary of Payment and Information Security Terms

Latest version: v2.0 (updated )

Available in: Chinese, English, French, German, Italian, Japanese, Portuguese, Russian, Spanish, Turkish

Guidance for Containers and Container Orchestration Tools

Latest version: v1.0 (updated )

Available in: Chinese, English, French, German, Japanese, Portuguese, Spanish

Guidance for PCI DSS Scoping and Segmentation

Latest version: v1.1 (updated )

Available in: English, Portuguese, Spanish

Guide to Safe Payments

Latest version: v3.0 (updated )

Available in: English

Increasing Security and Reducing Fraud with EMV Chip and PCI Standards

Latest version: PCI-EMV-Final1 (updated )

Available in: English

Increasing Security and Reducing Fraud with EMV Chip and PCI Standards (Print Version)

Latest version: EMV-Letter (updated )

Available in: English

It's time to change your password (Print Version)

Latest version: its_time_to_change_your_password_infographic (updated )

Available in: English

Mapping PCI DSS v3.2.1 to the NIST Cybersecurity Framework v1.1

Latest version: Mapping-PCI-DSS-to-NIST-Framework (updated )

Available in: English

Mobile Payment Acceptance Security Guidelines for Developers

Latest version: v2.0 (updated )

Available in: English

Mobile Payment Acceptance Security Guidelines for Merchants as End-Users

Latest version: v2.0 (updated )

Available in: English

Overview of the PCI DSS Wireless Guideline

Latest version: pci_dss_wireless_guideline_info_sup (updated )

Available in: English

PCI DSS 2.0 Risk Assessment Guidelines

Latest version: PCI_DSS_v2_Risk_Assmt_Guidelines (updated )

Available in: English, Portuguese

PCI DSS Applicability in an EMV Environment

Latest version: v1.0 (updated )

Available in: English, French, German, Spanish

PCI DSS Scoping and Segmentation Guidance for Modern Network Architectures

Latest version: PCI-DSS-Scoping-and-Segmentation-Guidance-for-Modern-Network-Architectures (updated )

Available in: Chinese, English, French, German, Japanese, Portuguese, Spanish

PCI DSS Tokenization Guidelines

Latest version: Tokenization_Guidelines_Info_Supplement (updated )

Available in: English

PCI DSS Virtualization Guidelines

Latest version: v2.0 (updated )

Available in: English, Portuguese

PCI DSS Wireless Guidelines

Latest version: PCI_DSS_v2_Wireless_Guidelines (updated )

Available in: English

PCI DSS for Large Organizations

Latest version: v1.0 (updated )

Available in: English

PCI Data Storage Do's and Don'ts

Latest version: PCI%20Data%20Storage%20Dos%20and%20Donts (updated )

Available in: English

PCI SSC At-a-Glance

Latest version: At_a_Glance_Role_of_the_PCI_SSC (updated )

Available in: Chinese, English, French, German, Italian, Japanese, Portuguese, Russian, Spanish, Turkish

PCI SSC CPE Flyer

Latest version: PCI%20SSC%20CPE%20Flyer%20Final (updated )

Available in: Chinese, English, French, German, Japanese, Portuguese, Spanish

PCI SSC Cloud Computing Guidelines

Latest version: v3.0 (updated )

Available in: English, Portuguese

PCI Small Merchants Case Study – Accor and VigiTrust

Latest version: v1.0 (updated )

Available in: English

Payment Card Industry Security Standards Overview

Latest version: PCI_SSC_Overview (updated )

Available in: English

Payment Data Security Essential: Patching

Latest version: Payment-Data-Security-Essential-Patching (updated )

Available in: Chinese, English, Japanese, Portuguese, Spanish

Payment Data Security Essential: Secure Remote Access

Latest version: Payment-Data-Security-Essential-Secure-Remote-Access (updated )

Available in: Chinese, English, Japanese, Portuguese, Spanish

Payment Data Security Essential: Strong Passwords

Latest version: Payment-Data-Security-Essential-Strong-Passwords (updated )

Available in: Chinese, English, Japanese, Portuguese, Spanish

Penetration Testing Guidance

Latest version: v1.1 (updated )

Available in: English, Portuguese

Phishing Resource Guide

Latest version: PCI_SSC_Phishing_Resource_Guide_-v06 (updated )

Available in: English

Protecting Telephone-based Payment Card Data

Latest version: v3.0 (updated )

Available in: English

Protecting Your Customer's Payment Card Data from Malware

Latest version: PCI-MalwareFinal-2 (updated )

Available in: English

Questions to Ask your Vendors

Latest version: v2.0 (updated )

Available in: Chinese, English, French, German, Italian, Japanese, Portuguese, Russian, Spanish, Turkish

RFC Process Guide

Latest version: v1.0 (updated )

Available in: English

Ransomware Resource Guide

Latest version: PCI_SSC_Ransomware_Resource_Guide (updated )

Available in: Chinese, English, French, German, Italian, Japanese, Portuguese, Russian, Spanish, Turkish

Responding to a Cardholder Data Breach

Latest version: Responding_to_a_Cardholder_Data_Breach (updated )

Available in: English

SSL and Early TLS Migration Resource Guide: Preparing for 30 June 2018 Deadline

Latest version: PCI_SSC_Migrating_from_SSL_and_Early_TLS_Resource_Guide (updated )

Available in: English

Skimming Prevention: Best Practices for Merchants

Latest version: Skimming_Prevention_BP_for_Merchants_Sept2014 (updated )

Available in: English

Skimming Prevention: Overview of Best Practices for Merchants

Latest version: Skimming_Prevention_At-a-Glance_Sept2014 (updated )

Available in: English

Skimming Resource Guide

Latest version: PCI_SSC_Skimming_Resource_Guide_v05 (updated )

Available in: English

Stay Smart on Protecting Against Card Fraud!

Latest version: PCI-Top-Ten (updated )

Available in: English

Stay Smart on Protecting Against Card Fraud! (Print Version)

Latest version: TOPTEN-Letter (updated )

Available in: English

Ten Common Myths of PCI DSS

Latest version: PCI%20SSC%20-%20Ten%20Common%20Myths (updated )

Available in: English

Terminal Software Security

Latest version: terminal_security_best_practices (updated )

Available in: English

Third-Party Security Assurance

Latest version: v1.1 (updated )

Available in: English, Portuguese

Tokenization Product Security Guidelines

Latest version: Tokenization_Product_Security_Guidelines (updated )

Available in: English

Use of SSL/Early TLS and Impact on ASV Scans

Latest version: v1.0 (updated )

Available in: English

Use of SSL/Early TLS for POS POI Terminal Connections

Latest version: v1.0 (updated )

Available in: English

Why PCI DSS v.3.0?

Latest version: PCIDSS (updated )

Available in: English

Windows XP Support is Ending

Latest version: PCI-WindowsXPV4_(1) (updated )

Available in: English

Windows XP Support is Ending (Print Version)

Latest version: WINDOWSXP-Letter (updated )

Available in: English