PCI Security Standards Council

PCI Security Standards Council is the global forum where payments industry stakeholders develop and promote data security standards and resources for safe payments.

Standards on the site The library holds PCI DSS, the core standard for protecting payment data, along with Key Management and Operations, Point-to-Point Encryption, Secure Software and Secure Software Lifecycle, PIN Security, Card Production and mobile and contactless payment standards. Training and certification programmes, a Merchant Resource Center, an FAQ section and the PCI Perspectives blog sit beside the document library.

Recent publications October 2026 brought guidance on securing AI in payment environments, a note marking 20 years of the Council and announcements of community meetings in Vancouver and Kuala Lumpur. September added the information supplement Security Considerations for AI Systems, the PCI KMO Standard v1.0 for entities that manage cryptographic keys, and a mapping of PCI DSS v4.0.1 to the NIST Cybersecurity Framework 2.0. In August the PTS POI Modular Security Requirements v7.0 appeared.

Why payments people use it Merchants, PSPs and security assessors go here for the authoritative text of requirements, mappings and self-assessment guidance. English.