Services
Services
SOC & Attestations
SOC & Attestations
Payment Card Assessments
Payment Card Assessments
ISO Certifications
ISO Certifications
Privacy Assessments
Privacy Assessments
Federal Assessments
Federal Assessments
Healthcare Assessments
Healthcare Assessments
Penetration Testing
Penetration Testing
Cybersecurity Assessments
Cybersecurity Assessments
Crypto and Digital Trust
Crypto and Digital Trust
Schellman Training
Schellman Training
ESG & Sustainability
ESG & Sustainability
AI Services
AI Services
Industry Solutions
Industry Solutions
Cloud Computing & Data Centers
Cloud Computing & Data Centers
Financial Services & Fintech
Financial Services & Fintech
Healthcare
Healthcare
Payment Card Processing
Payment Card Processing
US Government
US Government
Higher Education & Research Laboratories
Higher Education & Research Laboratories
About Us
About Us
Leadership Team
Leadership Team
Careers
Careers
Corporate Social Responsibility
Corporate Social Responsibility
Strategic Partnerships
Strategic Partnerships

Understanding PCI PA-DSS

Security for Applications and for Organizations

Download Now for Free

About this guide:

The Payment Application Data Security Standard (PA-DSS) has been an instrumental part of the PCI family of standards from nearly the beginning of the PCI SSC.

It helps merchants and service providers select applications developed by other parties that will aid in their compliance with PCI DSS, and allows those application vendors to market their applications as capable of meeting the necessary security requirements. That said, an application’s PA-DSS compliance will not address all of the user organization’s security or compliance needs, and PADSS applies to a certain set of payment applications only and not all applications in general. In this paper, we will consider the scope and purpose of PA-DSS, discuss the elements of a PCI PA-DSS validation, and address the ways which merchants or service providers can use an application validated for PA-DSS compliance.