Skip to content

Payment Card Industry

What is Payment Card Industry?

The collective of organizations including card brands, acquirers, issuers, and merchants involved in payment card transactions and subject to PCI standards.

Compliance and Regulatory

Terms that appear alongside payment card industry

Each of these is named in at least one of the same controls as payment card industry. The number is how many controls name both.

Frameworks that govern payment card industry

PCI DSS v4.0View framework →ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on payment card industry

Requirements naming payment card industry across 4 standards, quoted from the control text.

CIS Controls v81 control

Assess service providers consistent with the enterprise’s service provider management policy. Assessment scope may vary based on classification(s), and may include review of standardized assessment reports, such as Service Organization Control 2 (SOC 2) and Pa...

CIS-15.5 · Assess Service Providers →
GLI-33 - Gaming Laboratories International Event Wagering Systems1 control

GLI-33 crosswalk to adjacent standards + state-specific technical standards. PCI DSS (Payment Card Industry Data Security Standard) v4.0 - applies to card-not-present payments in event wagering systems; required for any operator handling cards directly;

GLI33-Crosswalk-PCI-NIST-ISO-StateStandards · GLI-33 Crosswalk to PCI DSS, NIST CSF, ISO 27001, State Technical Standards →
HKMA Cyber Resilience Assessment Framework (C-RAF)1 control

HKMA C-RAF crosswalk to international + sectoral cybersecurity frameworks. (a) NIST CYBERSECURITY FRAMEWORK (CSF) 2.0 - the 6 CSF functions (Govern + Identify + Protect + Detect + Respond + Recover) map directly to C-RAF 7 domains;

HKMA-CRAF-Crosswalk-NIST-CSF-ISO27001-FFIEC-CBEST-TIBER · HKMA C-RAF Crosswalk to NIST CSF, ISO 27001, FFIEC CAT, CBEST, TIBER-EU and Sectoral Frameworks →
HKMA TM-G-11 control

HKMA TM-G-1 coordination + 2024-2025 pipeline. COORDINATION WITH HKMA FRAMEWORKS: (a) HKMA SPM UMBRELLA (separately referenced) - TM-G-1 is one of 60+ SPM modules; SPM provides overall framework + supervisory expectations;

HKMA-TMG1-Coord-SPM-CRAF-Basel-FSB-2024-2025-Pipeline · TM-G-1 Coordination with HKMA SPM, C-RAF v2.0, Basel III, FSB, ISO 27001, NIST CSF and 2024-2025 Pipeline →

Questions people ask about payment card industry

What is Payment Card Industry?
The collective of organizations including card brands, acquirers, issuers, and merchants involved in payment card transactions and subject to PCI standards.
Why is Payment Card Industry important for compliance?
Payment Card Industry is a key concept in Compliance and Regulatory. Understanding payment card industry helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Payment Card Industry?
Payment Card Industry appears in the requirement text of CIS Controls v8, GLI-33 - Gaming Laboratories International Event Wagering Systems, HKMA Cyber Resilience Assessment Framework (C-RAF), HKMA TM-G-1. Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Payment Card Industry?
Explore our compliance framework pages to see how payment card industry applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Payment Card Industry applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.