PCI Payment Appli­cation Data Security Standard (PCI PA-DSS)

PCI PA-DSS Workshop

SRC supports and advises software manufac­turers in imple­menting the require­ments of the PCI Payment Appli­cation Data Security Standard for software products, e.g. by means of an intro­ductory workshop. The aim of the workshop is to provide a clear under­standing of the require­ments of PCI PA-DSS and its inter­pre­ta­tions on the one hand and to gain a compre­hensive overview of the software, the software archi­tecture, the devel­opment process and the imple­mented or planned security measures on the other hand. The procedure for carrying out the software validation as well as the upcoming work steps will also be coordi­nated within the framework of this workshop.

PCI PA-DSS Software Validation

SRC performs software validation based on the require­ments of PCI PA-DSS. The basis of the analysis is the document “Payment Card Industry (PCI) Payment Appli­cation Data Security Standard — Require­ments and Security Assessment Proce­dures”, which describes the require­ments for software with regard to the PCI Data Security Standard.
As part of validation, SRC checks to what extent the require­ments listed in the document are fulfilled and imple­mented by the product.
SRC will perform the validation step by step as follows:

• Pre-analysis and review of manufac­turer documents
• Software validation
• On-site analysis/interviews
• Creating the report

After a positive validation of the PCI PA-DSS software validation results by the PCI SSC, the software or product is included in the “List of validated payment appli­ca­tions” available on the Internet.