PCI SSC
What is PCI SSC?
The Payment Card Industry Security Standards Council, responsible for developing and managing PCI security standards including PCI DSS.
Frameworks that govern pci ssc
What the standards actually require on pci ssc
Requirements naming pci ssc across 2 standards, quoted from the control text.
Staff whom A3.1.3 names as holding responsibility for PCI DSS compliance must be trained on current PCI DSS or information security topics, with the training repeated at least once every 12 months. Related PCI DSS requirement 12.
pci-dss-4-0::A3.1.4 · A3.1.4 Annual PCI DSS training for compliance personnel →Scans are carried out by qualified people: the external ones by an Approved Scanning Vendor listed by PCI SSC, the internal ones by competent staff. The assessor checks the scan reports and asks who ran them.
pci-3ds-core-security-standard::P1-4.2.3 · P1-4.2.3 Scans run by qualified parties, external by an ASV →Questions people ask about pci ssc
What is PCI SSC?
Why is PCI SSC important for compliance?
Which compliance frameworks address PCI SSC?
Where can I learn more about PCI SSC?
See how PCI SSC applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.