PCI SSC (Payment Card Industry Security Standards Council)
Also: The Council, PCI Security Standards Council
PCIComplianceHubLast updated
A global forum that was launched in 2006 to manage the ongoing evolution of the Payment Card Industry (PCI) security standards with focus on improving payment security.
Applies to. PCI DSS v4.0.1 names the Council where a requirement depends on one of its programmes: Requirement 11.3.2 requires external vulnerability scans at least every three months by a PCI SSC Approved Scanning Vendor, resolved to the ASV Program Guide's passing standard, so the Council's ASV listing decides who may run the scan. The Council writes and maintains PCI DSS, the SAQs and the other standards and listings this glossary cites. It does not assign merchant or service provider levels or enforce compliance; the payment brands and acquirers do that.
Limits. Requirement 11.3.2 uses the Council's ASV listing only to say who may run the external scan; resolving the findings and arranging rescans remain the entity's own tasks.
In PCI DSS v4.0.1. 11.3.2