What Is the PCI Security Standards Council Website?

Updated

pcisecuritystandards.org is the official site of the PCI Security Standards Council (PCI SSC), a global forum that brings together payments industry stakeholders to develop and drive adoption of data security standards and resources for safe payments worldwide. Use it as the primary source for the standards themselves (such as PCI DSS), related publications, training and qualification programs, community events, and listings of providers and solutions. It is a standards body's site, not a payment processor or a compliance-certification service.

What the site is for

The Council describes itself as a forum where the payments industry develops and promotes data security standards. That mission shapes what you find on the site:

  • Standards and supporting documents — the core standards plus information supplements and mappings.
  • Training and qualification — programs to become an ISA or QSA, among others.
  • Events — Community Meetings in different regions, plus speaking opportunities.
  • Directories — tools to find a provider or solution and to search the document library.

What you can find and do there

The homepage groups its main actions under an "I Want To" menu and a set of featured highlights. Based on the site's own listings, these include:

Area What it offers
Newsroom Announcements of newly published standards and resources
Document Library Searchable repository of PCI SSC documents
Find a Provider or Solution Lookup tools for qualified assessors and products
Training Registration for PCI SSC training programs
Merchant Resource Center Resources aimed at merchants
Community Meetings Regional events with registration
Mailing list / blog Updates on news, training, and events

Recent publications highlighted on the site give a sense of the range: a new information supplement on Security Considerations for AI Systems, the PCI Key Management and Operations (KMO) Standard v1.0 for entities using cryptographic keys, and a mapping resource to align PCI DSS with NIST CSF. The site also notes a limited revision, PCI DSS v4.0.1, published to address stakeholder feedback since v4.0, and PCI PTS POI Modular Security Requirements v7.0.

How to use it for a specific task

The right entry point depends on what you need:

  • Looking for the current text of a standard — start with the Document Library rather than the homepage highlights, since the library is the searchable index of published documents.
  • Checking whether a product or assessor is listed — use "Find a Provider or Solution." Note that this is a listing tool; the site does not present itself as issuing compliance certifications to individual businesses.
  • Planning training — the training portal is a separate subdomain (training.pcisecuritystandards.org), where you can also subscribe to the mailing list or the PCI Perspectives blog.
  • Tracking changes — the Standards Updates & RFCs area and the newsroom are where revisions and new publications are announced; the DSS v4.0.1 revision is an example of a change you would catch there.

A practical example: if your team is aligning payment security controls with a broader framework, the published PCI DSS–NIST CSF mapping is the resource to open first, then confirm the underlying DSS version in the Document Library.

What to keep in mind

  • The site is informational and programmatic — standards, training, events, and directories. It does not process payments or certify your organization directly.
  • Pricing and access terms are not stated on the pages reviewed. Training and events involve registration, and the site offers mailing-list and blog subscriptions, but do not assume any resource is free or requires no login; check the specific page.
  • Versions matter. Because the Council publishes limited revisions (as with v4.0.1) and new standards (KMO v1.0), always confirm which version a document or mapping refers to before relying on it.