Severity: Low Guidance Global
PCI SSC publishes new guidance on PCI DSS third-party service providers
Original title: PCI SSC Publishes New Guidance on Understanding PCI DSS Third-Party Service Providers
- Published
- Source: blog.pcisecuritystandards.org
- Effective
- Not stated
- Deadline
- Not stated
Why it matters
The PCI Security Standards Council has published a new information supplement titled "Understanding PCI DSS Service Providers" to provide clarity on PCI DSS requirements for third-party service provider relationships. The guidance was developed in collaboration with the PCI SSC Board of Advisors and Global Executive Assessor Roundtable (GEAR) in response to industry questions about TPSP relationships. Merchants, service providers, assessors, and acquirers can use this supplement to better understand compliance expectations when engaging with third-party service providers.
What changed
- PCI SSC released a new information supplement titled 'Understanding PCI DSS Service Providers' to clarify PCI DSS requirements and expectations for third-party service provider relationships
Who is affected
Merchants, service providers, assessors, acquirers, and third-party service providers globally
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.