PCI Watch

Tracking changes across the Payment Card Industry
FAQs » FAQ #1266 » Versions » Diff

FAQ #1266 Diff

I?m in the middle of a PCI DSS 2.0 assessment ? should I start again on version 3.0 or keep going with version 2.0?

Earlier Version
Later Version
Removed
Added
OrganizationsEntities should always contact their acquirer or the payment brands directly for information about their compliance programs and reporting requirements. Contact details for the payment brands can be found in FAQ #1142 How do I contact the payment card brands?
As clarifications and additional guidance provided in updated PCI DSS versions may facilitate the implementation of requirements and address current threats, organizations are strongly encouraged to complete their transition to the most current PCI DSS version as early as possible.
Also refer to the following related FAQs:

FAQ 1564: How does an entity report the results of a PCI DSS assessment for new requirements that have already begun their PCI DSS validationare noted in PCI DSS as best practices until a future date?
FAQ 1563: What should an entity do if its PCI DSS assessment will not be complete prior to that standard's retirement date?
FAQ 1328: Where can I find the current version of PCI DSS?
FAQ 1565: Does an entity's PCI DSS assessment result expire when a new versionthe standard against which the entity was assessed is released can complete their assessment and validation process to the previous version prior to its retirement. Once the previous version has been retired, all validation efforts must be to the most current PCI DSS version.

As clarifications and additional guidance provided in updated PCI DSS versions may facilitate the implementation of requirements and address current threats, organizations are strongly encouraged to complete their transition to the most current PCI DSS version as early as possible.retired?

Disclaimer: This FAQ has been processed for display on this website and may contain errors. Please check the original FAQ on the PCI SSC website for the authoritative version.