Software Security Framework (SSF)
PCIComplianceHubLast updated
The PCI Security Standards Council framework that replaced PA-DSS on 28 October 2022. It comprises two standards: the Secure Software Standard, which validates a payment software product, and the Secure Software Lifecycle Standard, which validates the vendor development process. The framework is designed to accommodate modern development practices such as continuous delivery, which PA-DSS, built around discrete versioned releases, handled poorly.