Monday, April 27, 2015

New PCI DSS SAQs for version 3.1

As Emma Sutcliffe mentioned to us at the PCI Workshop last week, the PCI Security Standards Council has today released version 3.1 of the Self-Assessment Questionnaires. At this time they are only available in Microsoft Word format. I expect the PDFs will come later.

In addition, there are two new updates to previous documents. First, there is new version of Understanding SAQs for PCI DSS v3. I wish they had called it v3.1 to distinguish it from that confusing InfoSupp released last May. I have not read it in detail yet, but I did take a look at the comparison tables. Hallelujah! They removed that horrible, undefined term “acceptance” from the document. That added so much confusion. They also removed the entire “Control of Cardholder Data” comparison completely.

The other updated document is SAQ Instructions and Guidelines v3.1, finally updated from PCI DSS v2. I haven’t had a chance to dig deeply into this either, but I’m sure it will yield some gems I can use in tomorrow’s PowerPoint!

You can find the new documents on the PCI SSC web site in the document library under the SAQs tab. There is also a SAQs v3.1 link on the home page:

Monday, April 13, 2015

Sunday Evening Reception

Hello all,

There are MANY attendees checking in on Sunday this year, so you may have noticed that the Treasury Institute has added a Welcome Reception on Sunday evening. This informal event will be a great opportunity to meet and greet old friends and new. The reception will be in the Opium Terrace (by the pool) from 6:00 to 7:30 PM, with beer, wine, and cheese served. (Please note, the time was incorrectly listed as 5:00-6:30 in an earlier post.)

Please make sure you hit the Workshop registration table, open from 4:00PM-6:00PM Sunday, so that you can pick up your badge for entry to the reception. As usual, many of us will join up into informal groups for dinner afterwards. Don't be shy.

I’m looking forward to seeing many of you next week in Las Vegas!


Friday, April 3, 2015

2015 PCI Workshop Sponsors

I'm really looking forward to the Treasury Institute's 2015 PCI Workshop in Las Vegas Henderson, NV, coming up in about two weeks. The frigid Michigan winter made a PCI popsicle out of me, and I am ready to thaw out!

But before I head out I want to make a mention of our workshop's Partners and Supporters. Without their generous support we would not be able to have this terrific workshop, especially at the low price for registration. Most of these supporters will be there with informational tables, and it would be great if you could stop by their display and say hello during the workshop this year. They offer solutions to help us get our jobs done, and they are generally very familiar with our sector.

Here is the group we will have with us later this month:

Founding Partner

Alliance Partners
Association for Financial Professionals

Bluefin Payment Systems

See you in Vegas, Baby!