Which standard applies to secure payment applications to support PCI DSS compliance?

Which standard applies to secure payment applications to support PCI DSS compliance?

• A. PCI DSS
• B. PA-DSS
• C. PCI P2PE
• D. PCI Card Production

Answer: (B)

Payment applications that handle cardholder data are governed by the Payment Application Data Security Standard. PA-DSS applies to software that stores, processes, or transmits card data and sets requirements to build and deliver secure payment applications so they won’t undermine PCI DSS compliance in the environments where they’re used. By adhering to PA-DSS, developers help ensure the application itself doesn’t introduce vulnerabilities and supports merchants and service providers in meeting PCI DSS. The broader PCI DSS framework covers overall security for organizations, PCI P2PE focuses on encrypting data from the point of capture to the processor (reducing scope rather than governing the app’s development), and PCI Card Production is not a PCI standard.

Payment applications that handle cardholder data are governed by the Payment Application Data Security Standard. PA-DSS applies to software that stores, processes, or transmits card data and sets requirements to build and deliver secure payment applications so they won’t undermine PCI DSS compliance in the environments where they’re used. By adhering to PA-DSS, developers help ensure the application itself doesn’t introduce vulnerabilities and supports merchants and service providers in meeting PCI DSS. The broader PCI DSS framework covers overall security for organizations, PCI P2PE focuses on encrypting data from the point of capture to the processor (reducing scope rather than governing the app’s development), and PCI Card Production is not a PCI standard.