The PCI SSC Request for Comments (RFC) process is an avenue for PCI SSC stakeholders to provide feedback on existing and new PCI security standards and programs. This feedback plays a critical role in the ongoing maintenance and development of these resources for the payment card industry. In the coming months, there are several opportunities for stakeholders to participate in an RFC, including:
- PCI DSS v4.0 Draft v0.2 (23 September – 13 November)
- PCI PTS HSM v4.0 Draft Standard (November/December)
- PCI Card Production v3 Draft Standards (November/December)
Visit the RFC page for more information on these upcoming opportunities.
A primary focus of the Council is to increase industry participation in the development of PCI standards and programs. As such, PCI SSC has developed detailed and easy-to-understand guidance on its official RFC process. To learn more, please check out the RFC Process Guide and RFC-at-a-Glance infographic.
Additionally, the Council has developed a new resource to help ensure participants’ time is spent effectively and to facilitate quality contributions to PCI SSC standards and programs. Read this resource guide to learn about best practices when participating in a PCI SSC RFC.
