In response to questions we’ve received regarding the PCI Software Security Framework (PCI SSF), we’ve compiled the following answers to clarify the PCI Council’s newest standards.
Does the PCI SSF apply to me?
The PCI SSF is currently composed of two standards:
1. Secure Software Standard (SSS)
2. Secure Software Lifecycle Standard (SSLC)
The SSS applies to payment software that is sold, distributed, or licensed to third parties. This...