PCI Security Standards Council: Summary of Changes DSS 1.1 to 1.2

Yesterday the SSC released a 4 page summary document of changes to the PCI-DSS. The next version of the DSS is due out on October 1 this year.

So how’s it look? Overall, we’re pretty encouraged. The core changes relate to wording clarification and will help merchants and retailers to understand available options for compensating controls.

As with any update, though, it looks like this one might have introduced some big questions as it simultaneously answered many others. Let’s take a closer look:

Cause for Celebration Changes

Requirement 1