PCI SSC council announces updates for PTS POI.

A
admin

Jun 19, 2020

  • 2 min Read
  • Shares
PCI SSC council announces updates for PTS POI.

PCI SSC announced and published new updates in the PCI PIN Transaction Security (PTS) Point-of-Interaction (POI) Modular Security Requirements v6.0 standard. With new advancements made in the payment ecosystem, new applications and payment device technology, it’s necessary to safeguard and secure controls against cybercriminals who are developing new ways to breach systems storing sensitive payment data.

The PTS POI standard was developed to protect the PINs and cardholder data on magnetic stripe or the chip of an EMV card used along the mobile device. The latest version 6.0 includes key requirements and changes related to :-

  • Restructuring key modules into Physical and Logical, Integration, Communications and Interfaces, and Life Cycle to reflect the diversity of devices supported under the standard and the application of requirements based upon their individual characteristics and functionalities.
  • Ensuring ongoing protection by limiting the firmware approval timeframe to three years.
  • Including requirements for devices that accept EMV enabled cards to support Elliptic Curve Cryptography (ECC), facilitating the EMV migration to a more robust level of cryptography.
  • Enhancing support for accepting the magnetic stripe cards in mobile payments using solutions that follow the Software-Based PIN Entry on COTS (SPoC) Standard.

The in detail documents related to the PTS POI v6.0 Standard has been updated at the  PCI SSC document library. The documents are as stated below:

As a forerunner on the cybersecurity front, QRC supports their customers to establish, document, implement and maintain Data Security and Privacy frameworks to protect their sensitive data from all Internal / External Threats and manage the confidentiality, Integrity, availability, Security, Privacy of such information systematically.

Other Blogs

Previous
Next
ISO/IEC 27701:2025 Transition: What Organizations Need to Know Blog

ISO/IEC 27701:2025 Transition: What Organizations Need to Know

ISO/IEC 27701 has entered a new phase. Published on 14 October 2025, ISO/IEC 27701:2025 replaces…

Read More
PCI KMO Standard v1.0: What It Means for Payment Security Blog

PCI KMO Standard v1.0: What It Means for Payment Security

Learn what PCI KMO Standard v1.0 covers, who it affects, how it supports PIN and…

Read More
Firewall Ruleset Review: What Your Rules Are Really Allowing Blog

Firewall Ruleset Review: What Your Rules Are Really Allowing

Every firewall does exactly what its rules tell it to do - nothing more. A…

Read More
CEA Cyber Security Regulations 2026: Compliance Guide Blog

CEA Cyber Security Regulations 2026: Compliance Guide

The Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2026 create an auditable cyber…

Read More
Incident Response Planning for Regulated Entities in India Blog

Incident Response Planning for Regulated Entities in India

Every regulated entity has an incident response plan. It sits in a policy document, usually…

Read More
AI Governance and Compliance in Indian Financial Services Blog

AI Governance and Compliance in Indian Financial Services

Indian banks, NBFCs, and insurance companies are deploying AI across credit scoring, fraud detection, customer…

Read More
FAQ: Cloud Compliance Questions From Fintech CTOs Blog

FAQ: Cloud Compliance Questions From Fintech CTOs

Any cloud provider with data center regions in India - AWS (Mumbai and Hyderabad), Azure…

Read More
RBI Cybersecurity Directions 2026: A Complete Compliance Guide Blog

RBI Cybersecurity Directions 2026: A Complete Compliance Guide

RBI's approach to cybersecurity regulation has evolved from advisory circulars to mandatory directions. The regulatory…

Read More

Ready to become compliant?

Talk to QRC to understand your scope, close gaps, and move confidently
toward validation readiness.