PCI Software Security Standards Framework, an evolution away from PA DSS

Since the launch of PA DSS in 2011, there has been a significant transformation in the payment application landscape. With the advancement in technology, several new methods are innovated to accept payments. This innovation has raised the need to safeguard transactions against potential data breaches and attacks. But, there is no Security Standard that can address the security concerns in both traditional applications and modern payment software along with respective development practices. Keeping the priority of safeguarding the present-day payment applications with an objective approach, PCI SSC has launched The Software Security Standards (S3) Framework. The goal of the PCI Software Security Standards (S3) Framework is to provide application software with better security controls and ensure that the application vendors are using a better set of software security tools, ensuring data security throughout the life cycle.