The PCI Security Standards Council recently unveiled the long-awaited version 3.0 of the Payment Card Industry Data Security Standard (PCI DSS). Retailers, service providers and other organizations involved in credit card processing have until January 2014 to comply with the new standard. There’s a lot to do. How should an organization get started? The best approach is to prioritize the changes based upon the date they become effective for your credit card processing activities.

The good news is that, although PCI DSS 3.0 went into effect on January 1, 2014, merchants have a one year grace period to adapt to the new standard. In the interim, they may choose to recertify under either the PCI DSS 2.0 or 3.0 standard. In addition, there are a handful of requirements that have implementation deadlines further delayed until July 1, 2015.

Read More: PCI DSS 3.0 Compliance Simplified

Published February 25, 2014 in BizTech Magazine