News

PCI SSC announces 2015 special interest group topics

In 2015, group members will develop guidance documents for two topics: daily log monitoring and determining shared responsibilities for entities and third-party providers.

November 6, 2014

The PCI Security Standards Council, an open forum for the development of payment card security standards, has announced the voting results for 2015 special interest group projects. SIGS are PCI community-led initiatives that address specific areas or security challenges in relation to the PCI standards.

PCI participating organizations — including merchants, financial institutions, service providers and associations — voted on seven proposals submitted by their peers. Topics chosen for exploration in 2015 include:

• Daily Log Monitoring — guidance on effective daily log monitoring; and
• Shared Responsibilities — guidance on determining shared responsibilities for entities and third-party service providers.

"The community had to choose among seven strong proposals from their peers, so it was certainly not an easy decision," said Ella Nevill, vice president of stakeholder engagement for PCI SSC. "Again, we are encouraged by how many participating organizations were involved in the submission and election process this year. Special interest groups continue to be an excellent vehicle for leveraging their expertise in the work we're doing to increase payment card security globally."

SIG leads will convene each group to formalize its charter and precise scope of work prior to project kickoff in January.To get involved in a project, participating organizations and assessors must complete a registration form on the PCI SSC website between Dec. 1 and Dec. 22. 

Further information about projects and registration, as well as downolads of guidance documents generated by previous SIGs, can be found at the PCI SSC website.

Past SIG contributions include guidance on topics such as security awareness, penetration testing, e-commerce security, cloud computing, wireless security, EMV chip and point-to- point encryption.