Recent FAQ Changes

❓ FAQ 1142 Updated 2012-11-20T18:07:00+00:00

How do I contact the payment card brands?

Contact details for the payment brands are provided below:

American Express

Website: www.americanexpress.com/datasecurity
Email: AmericanExpressCompliance@trustwave.com

Discover
- Website: http://www.discovernetwork.com/merchants/data-security/index.html - For questions about the …

❓ FAQ 1181 New 2012-11-16T00:00:00+00:00

How can I check whether a payment application is PA-DSS validated?

The List of Validated Payment Applications on the PCI SSC website is the authoritative list of applications which have been accepted by PCI SSC as PA-DSS validated.If an application is …

❓ FAQ 1195 New 2012-11-16T00:00:00+00:00

What is the difference between a Validated Payment Application which is shown on the PCI SSC website as "Acceptable for New Deployments" and one which is shown as "Acceptable only for Pre-Existing Deployments"?

When a PA-DSS validated payment application has expired, it is listed as acceptable only for pre-existing deployments, or in other words, for customers that have already purchased and deployed the …

❓ FAQ 1183 New 2012-11-16T00:00:00+00:00

The PA-DSS Program Guide v2.0 says application version numbers may consist of a combination of fixed and variable alphanumeric characters. What does this mean?

Application version numbers may consist of any combination of alphanumeric characters to create a unique version, discernible from other versions of that payment application, based on the vendor's versioning methodology. …

❓ FAQ 1182 New 2012-11-16T00:00:00+00:00

Is it acceptable to make minor changes to a PA-DSS validated application and retain the existing version number?

All changes to the software of a validated PA-DSS application must result in a new version number, even if there is no impact on PA-DSS requirements. This is necessary to …

❓ FAQ 1142 Updated 2012-11-16T00:00:00+00:00