MA-PCI-SSC
Today, the PCI Security Standards Council (PCI SSC) published new requirements for the secure design and development of modern payment software. The PCI Secure Software Standard and the PCI Secure Lifecycle (Secure SLC) Standard are part of a new PCI Software Security Framework , which includes a validation program for software vendors and their software products and a qualification program for assessors. The programs will be launched later in 2019.
“Innovation in payments is moving at an incredible pace. Each advancement provides the industry the opportunity to develop applications more quickly and efficiently than before and to design software for new platforms for payment acceptance,” said PCI SSC Chief Technology Officer Troy Leach. “The new PCI Secure Software Standard and PCI Secure SLC Standard support this evolution in payment software practices by providing a dynamic way for developers to demonstrate their software protects payment data for the next generation of applications.”
PCI Software Security Standards expand beyond the scope of the Payment Application Data Security Standard (PA-DSS) for traditional payment software to address overall software security resiliency for modern payment software. Specifically:
- The PCI Secure Software Standard outlines security requirements and assessment procedures to help ensure payment software adequately protects the integrity and confidentiality of payment transactions and data.
- The PCI Secure SLC Standard outlines security requirements and assessment procedures for software vendors to validate how they properly manage the security of payment software throughout the entire software lifecycle.
These standards will replace the PA-DSS and listing when it is retired in 2022. In the meantime, there will be a gradual transition period for organizations with investments in PA-DSS. For more information on the new standards and the PA-DSS transition period, read PCI Perspectives blog post, Just Published: New PCI Software Security Standards .
The PCI Software Security Standards were developed with the input of a dedicated task force made up of payment card industry participants. PCI SSC Participating Organizations and assessors also reviewed and provided feedback on the standards via multiple request for comments (RFC) periods throughout the development process.
Steve Lipner, Executive Director of the Software Assurance Forum for Excellence in Code (SAFECode), participated in the PCI Software Security Task Force and said, “I was delighted to review the final version of the PCI Secure Software Lifecycle Standard. The document clearly reflects an adaptation of software security best practices to the needs of the payment card industry and its certification process and is well aligned with SAFECode’s principles and the concepts in SAFECode’s Fundamental Practices for Secure Software Development. I was particularly pleased to see the emphasis on integrating security into the software development process rather than attempting to assure security by after-the-fact testing.”
The PCI Secure Software Standard, PCI Secure SLC Standard, a supporting FAQ document, and a Glossary of Terms, Abbreviations, and Acronyms are available for download from the Document Library on the PCI SSC website.
About the PCI Security Standards Council
The PCI
Security Standards Council
(PCI SSC) leads a global, cross-industry
effort to increase payment security by providing industry-driven,
flexible and effective data security standards and programs that help
businesses detect, mitigate and prevent cyberattacks and breaches.
Connect with the PCI SSC on LinkedIn
.
Join the conversation on Twitter @PCISSC
.
Subscribe to the PCI
Perspectives Blog
.
View source version on businesswire.com: https://www.businesswire.com/news/home/20190116005557/en/
Contact:
Mark Meissner PCI Security Standards Council +1-202-744-8557 press@pcisecuritystandards.org Twitter @PCISSC
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
CA-QUALCOMM-INCORPORATED19.4.2024 15:01:33 CEST | Press release
Qualcomm Schedules Second Quarter Fiscal 2024 Earnings Release and Conference Call
CO-NEWMONT-CORPORATION19.4.2024 14:57:33 CEST | Press release
Newmont Appoints Mining Industry Veteran Francois Hardy as Chief Technology Officer
TX-SLB19.4.2024 12:51:33 CEST | Press release
SLB Announces First-Quarter 2024 Results, Targeting to Return $7 Billion to Shareholders Over 2024–2025
CO-ZAYO-GROUP19.4.2024 09:01:30 CEST | Press release
Zayo Group Appoints New CEO of Zayo Europe
HUBHEAD18.4.2024 22:16:32 CEST | Press release
HubHead Corp. Acquires DataSeer Inc. Assets to Expand its Vertical AI Capabilities
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom