About Us
Who We Are
The PCI Security Standards Council (PCI SSC) is a global forum for the ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection. Our role is to enhance global payment account data security by developing standards and supporting services that drive education, awareness, and effective implementation by stakeholders. We achieve this with a strategic framework to guide our decision-making process and ensure that every initiative is aligned with our mission and supports the needs of the global payments industry.
The four pillars of our strategic framework include:
Increase industry participation and knowledge
Evolve security standards and validation programs
Secure emerging payment channels
Increase standards alignment and consistency
Payment Security Standards and Resources
We help secure global payment data with payment security standards and resources that are industry-driven, forward-looking, and collaborative. PCI SSC standards and resources help protect the people, processes, and technologies across the payment ecosystem to help secure payments worldwide. We help secure payments by:
- Managing Global Payment Security Standards
- Validating and Listing Products and Solutions that Meet PCI SSC Standards and Program Requirements
- Training, Testing, and Qualifying Security Professionals and Organizations
- Providing Free Best Practices and Payment Security Resources
Industry-Driven
Our standards and resources are powered with feedback from the industry. This input is crucial to reflect industry needs and challenges and continue to keep global payments safe.
Through Participation with the Council Stakeholders Can:
- Provide Strategic Input into Direction of the Council
- Contribute Feedback on Standards
- Stand For and Elect the Council’s Board of Advisors
- Ensure Guidance and Training Keeps Pace with Threat Landscape
Forward-Looking
Staying ahead of threats is key. Our standards and resources are developed considering both emerging and established payment technologies and threats.
By Focusing on the Future, We:
- Encourage Flexibility to Adapt to Changing Threats
- Promote and Accommodate Technology Innovation
- Support Continuous Security
Collaborative
The Council facilitates industry knowledge sharing to help protect global payments.
The Council Fosters Industry Collaboration Through:
- Global Events Designed for the Industry to Share Knowledge and Network
- Hosting Special Interest Groups that Tackle Industry Identified Payment Security Challenges
Industry-Driven
Our standards and resources are powered with feedback from the industry. This input is crucial to reflect industry needs and challenges and continue to keep global payments safe.
Through Participation with the Council Stakeholders Can:
- Provide Strategic Input into Direction of the Council
- Contribute Feedback on Standards
- Stand For and Elect the Council’s Board of Advisors
- Ensure Guidance and Training Keeps Pace with Threat Landscape
Forward-Looking
Staying ahead of threats is key. Our standards and resources are developed considering both emerging and established payment technologies and threats.
By Focusing on the Future, We:
- Encourage Flexibility to Adapt to Changing Threats
- Promote and Accommodate Technology Innovation
- Support Continuous Security
Collaborative
The Council facilitates industry knowledge sharing to help protect global payments.
The Council Fosters Industry Collaboration Through:
- Global Events Designed for the Industry to Share Knowledge and Network
- Hosting Special Interest Groups that Tackle Industry Identified Payment Security Challenges
Stakeholder Community
Broad industry participation is critical to the Council’s mission to help secure payment data globally.
Join the Council today through one of our many participation avenues:
PCI SSC Organizational Structure
The PCI SSC is led by a policy-setting Executive Committee composed of representatives from the Founding Members and Strategic Members.
A Board of Advisors, representing and elected by Participating Organizations, provides input to the organization and feedback on the evolution of the PCI Standards. In addition, the Roadmap Roundtable Group (RRG) works with PCI SSC and the Executive Committee to provide input and direction on PCI SSC strategic initiatives.
Day-to-day management of the Council’s activities is led by the PCI SSC Leadership Team, which reports to the Executive Committee.
Who Follows PCI Standards?
The PCI Data Security Standard (PCI DSS) and other applicable PCI Standards are intended for entities that store, process or transmit payment account data, entities accepting or processing payment transactions, and for developers and manufacturers of software and devices used in those transactions.
Does the PCI Security Standards Council enforce compliance?
No. The Council’s role is to develop and maintain standards. We do not monitor the implementation of standards. Whether an entity is required to comply with or validate compliance to a PCI SSC standard is at the discretion of organizations that manage compliance programs, such as a payment brand, acquirer, or other entity. Visit the FAQ page for more information.
