PCI SSC releases version 2.0 of the Secure Software Lifecycle Standard
PCI SSC published version 2.0 of the Secure Software Lifecycle Standard, aligning with the Secure Software Standard v2.0 and adding requirements for digital tools and AI. A 12-month transition period from v1.1 to v2.0 begins once training becomes available in Q4 2026.
- Framework
- PCI DSS
What changed?
Each point with the sentence from the source that says it.
Version 2.0 of the PCI Secure SLC Standard aligns with version 2.0 of the PCI Secure Software Standard, including a focus on 'sensitive assets' and the new Sensitive Asset Identification Document (SAID).
Version 2.0 of the PCI Secure SLC Standard now aligns with version 2.0 of the PCI Secure Software Standard published earlier this year, which includes a focus on ‘sensitive assets’ and the new Sensitive Asset Identification Document (SAID).
New content and requirements regarding the use of 'digital tools', including accounting for artificial intelligence (AI) within a vendor's Secure SLC processes, have been added.
New content and requirements regarding the use of ‘digital tools’, which include accounting for artificial intelligence (AI) within a vendor’s Secure SLC processes, have also been added.
Once training becomes available, a 12-month transition period from v1.1 to v2.0 will begin.
Once training becomes available, a 12-month transition period from v1.1 to v2.0 will begin.