New PCI Rules Won’t Be Out Until April

March 3, 2016

When the PCI Council last gave some hints as to what the upcoming PCI DSS 3.2 rules will (about two weeks ago, back on Feb. 17), it said the spec would be released “in the March/April timeframe.” A council official on Wednesday (March 2) tweaked that guidance, ruling out March and saying that the council “anticipates an April release of the standard.”

The timing of the new PCI rules (aka guidelines that really and truly do not like being ignored) is important as they are lengthy, complicated and merchants—especially smaller merchants—are going to expect PFs to know them intimately. Also, as PCI requirements get increasingly stringent and complex, the need for PFs to take over those duties will grow.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: