PCI Security Standards Council, LLC Unclaimed

Ensures robust protection of cardholder data through a comprehensive security framework.

Enhances software security throughout its lifecycle, aligning development practices with security standards.

Ensures secure transactions at payment terminals to protect cardholder data.

Ensures secure handling and processing of PINs in payment transactions.

Enhances security management for logical provisioning of card data.

Ensures secure card production through established physical safeguards.

Enhances online payment security with robust 3DS transaction protocols.

Empowers secure mobile payment processing with standard mobile devices.

Secure Software-Based PIN Entry Solutions For Payment Workflows.

Seamlessly Enable Contactless Payments on COTS Devices

Framework and practices to assess, validate, and maintain compliance with the PCI Data Security Standard, including requirements for payment application security and organizational controls.

Certification processes and device-level security requirements for payment terminals and POI devices to ensure secure transaction capture and processing.

Standards and controls for enabling secure contactless and mobile payments on commercial off-the-shelf (COTS) devices, including software-based PIN entry and contactless acceptance.

Logical and physical controls, access restrictions, and provisioning practices to protect card production, personalization, and distribution processes.

Controls and guidelines for secure PIN entry, handling, and verification across devices and transaction flows to reduce fraud and exposure of sensitive authentication data.

Standards and core protocols for 3-D Secure transaction authentication to strengthen e-commerce authentication and reduce cardholder authentication fraud.

Standards, assessments, and training to embed security into each phase of payment application development and reduce software vulnerabilities in payment environments.

Encryption and key management practices to protect cardholder data from the point of capture through transmission to processors, including methods to reduce PCI assessment scope.

PCI Data Security Standard (PCI DSS)

The PCI Data Security Standard (PCI DSS) establishes requirements for safeguarding cardholder data and securing payment environments by providing comprehensive guidelines and practices for organizations. It includes Point-to-Point Encryption (P2PE), Secure Software, and Payment Application Data Security Standard (PA-DSS) details to create a secure transaction ecosystem.

• Protects Cardholder Data
  The PCI DSS sets forth standards to help organizations mitigate risks associated with cardholder data and ensures necessary protections are in place for emotive online payment systems.
• Protect Sensitive Data
  P2PE ensures that cardholder data is encrypted instantly upon capture, protecting it from potential breaches during transmission.
• Ensures Software Security Standards
  Provides clear guidelines and requirements for the development and deployment of secure payment applications, thereby minimizing vulnerabilities and risks associated with payment processing.
• Facilitates Secure Payment Applications
  PA-DSS provides guidelines that help software developers create secure payment applications to prevent the compromise of sensitive cardholder data.
• Verifies Compliance
  The standard enables organizations to verify their compliance status, thereby ensuring they meet required security measures to protect sensitive payment information.
• Promotes Ongoing Security
  By adhering to the PCI DSS, organizations can establish a continuous improvement process for security best practices, adapting to evolving threats.
• Minimize Compliance Costs
  Using P2PE can significantly lower the resources and costs associated with PCI DSS compliance by minimizing the amount of cardholder data stored.

Secure Software Lifecycle (Secure SLC)

The Secure Software Lifecycle (Secure SLC) provides lifecycle security standards for secure software development, ensuring consistency and best practices throughout the software development process. It includes assessments and training to enhance overall secure software development practices.

• Enhance Software Development Security
  This feature provides developers with guidelines that ensure secure practices are integrated at every stage of software development, reducing vulnerabilities and enhancing code quality.
• Ensure Standardized Security Practices
  Standardized security practices help organizations maintain compliance and minimize risks by implementing proven methodologies throughout their software development cycles.
• Access Training Resources
  The Secure SLC includes training resources to educate development teams on secure practices, ensuring a comprehensive understanding of risks and methodologies for secure software development.

PTS Point of Interaction (POI)

Security standard for Point-of-Interaction devices, providing certification and guidelines for secure transactions to enhance consumer trust and protect sensitive payment data.

• Establishes Secure Transaction Processes
  Defining protocols for secure transactions at payment terminals enhances consumer trust and protects sensitive payment data.
• Certifies Device Security Compliance
  Assures that payment devices meet international security standards to prevent data breaches and fraud.
• Enables Modern Payment Options
  Supports diverse payment technologies to increase convenience and customer satisfaction.

PIN Security

Security standard for PIN entry in payment systems, addressing robust risk management and compliance guidelines for maintaining user confidence.

• Enhances User Confidence
  Establishes robust protocols for the secure entry and transmission of PINs, significantly reducing the risk of fraud and ensuring user trust in the payment system.
• Simplifies Compliance Process
  Equips organizations with the necessary frameworks and requirements to meet compliance obligations, facilitating a smoother accreditation process.

Card Production and Provisioning - Logical

Logical provisioning and provision management for card data, ensuring secure and efficient management processes in the card production workflow through comprehensive guidelines and standards.

• Achieve Compliance Standards
  Helps organizations achieve compliance with PCI DSS and other essential policies, safeguarding cardholder data.
• Streamline Secure Provisioning
  Utilizing advanced processes to streamline secure logical provisioning, ensuring that all card data is handled with the highest security standards.

Card Production and Provisioning - Physical

Physical security controls for card production and provisioning. This standard outlines best practices to help protect cardholder data during card creation and distribution.

• Establishes Strong Physical Security Controls
  Ensures that facilities involved in card production have stringent physical security measures in place, thereby reducing the risk of unauthorized access and potential data breaches.
• Limits Access to Authorized Personnel
  Controls who can enter secure production facilities, ensuring that only trained and approved individuals have access to sensitive areas where card data is managed.

PCI 3DS Core

The PCI 3DS Core is the foundational standard for 3DS transactions, providing essential security protocols that enhance the safety of online payments and protect cardholder data during transactions.

• Ensures Secure Payments
  The PCI 3DS Core establishes critical protocols for verifying cardholder identities, mitigating fraud, and enhancing trust between vendors and consumers, ensuring secure online transactions.

MPoC Solutions

Mobile Payments on COTS (MPoC) solutions enable secure mobile payment processing using commercially available mobile devices. It streamlines transactions while maintaining security standards.

• Facilitates Mobile Payments
  Allows merchants to process payments securely through compatible mobile devices, enhancing transaction flexibility and security.
• Meets PCI Standards
  Provides confidence to merchants and consumers by ensuring that all transactions comply with PCI security guidelines.

SPoC Solutions

Software-based PIN entry solutions that enable secure payment transactions on commercial off-the-shelf devices. This solution enhances security by facilitating PIN input through a software framework, ensuring compliance with standards.

• Ensures Secure PIN Entry
  Utilizes robust encryption methods to safeguard users' PINs during transactions, protecting against data breaches.

CPoC Solutions

Contactless payments on COTS solutions, leveraging the security framework to enhance transaction processes for both merchants and consumers.

• Facilitates Contactless Payments
  This feature allows users to conduct transactions quickly and securely on commercially available off-the-shelf devices, enhancing customer convenience and operational efficiency.