Will all participating payment brands in the PCI Security Standards Council recognize a recommendation of compliance from an ASV?
Each individual brand is responsible for accepting a specific recommendation of compliance from an ASV.
Recent FAQ Changes RSS
Latest changes to PCI SSC frequently asked questions.
Once my business has been determined to be compliant by a QSA, would I or the QSA need to communicate this fact to the PCI Security Standards Council?
No. The PCI Security Standards Council is not a compliance organization. Each brand maintains its own compliance programs.
In case of a suspected breach, should the PCI Security Standards Council be contacted directly?
No. In the event of a suspected account security breach, the business entity should follow existing, brand-specific processes and procedures for notifying the affected payment brand(s) and law enforcement officials.
…Does the PCI Security Standards Council enforce compliance?
No, the PCI Security Standards Council will not be replacing the individual brands’ compliance programs. The individual participating payment brands will separately determine what entities must be compliant, including any …
What is the mission of the PCI Security Standards Council?
The mission of the PCI Security Standards Council is to enhance payment account security by creating and maintaining PCI Security Standards, as well fostering the education and awareness of these …