News

PCI SSC announces proposed 2015 special interest group projects

Security guidance for ATMs is one of several projects proposed for consideration next year by the PCI Security Standards Council.

August 25, 2014

Today the PCI Security Standards Council, a global forum for the development of payment card security standards, announced its list of special interest group proposals for consideration as 2015 projects.

Special interest groups are PCI community selected and developed initiatives that address specific areas or security challenges related to PCI standards. For 2015, PCI Participating Organizations and assessors have proposed the following topics:

cryptographic keys and digital certificate security guidelines;
effective daily log monitoring;
guidance on determining shared responsibilities for interrelated third party services;
network virtualization;
PCI DSS assessments of mainframe environments;
unattended security guidance for ATMs, vending, and pay at the pump; and
working forum for securing retail locations.

Each topic will be presented to attendees at the 2014 North American and European Community Meetings. Participating Organizations will then vote on the projects during an online election Oct. 13–23; winners will be announced in November.

“Special Interest Groups enable the PCI community to unite across industries with the goal of providing additional guidance in the payment security environment. By bringing together thought leaders from various backgrounds, we are able to cultivate real-world resources for merchants, banks, acquirers and any organization that deals with sensitive payment card data,” said Bob Russo, general manager of the PCI Security Standards Council.

Registration for the 2014 Community Meetings and SIG sessions is available online. More information on the SIG process is also available.