What is PA‐DSS and PABP?
PA‐DSS refers to Payment Application Data Security Standard maintained by the PCI Security Standards Council. PABP is Visas Payment Application Best Practices, which is now referred to as PA‐DSS. Visa started the program and it is being transitioned to the PCI Security Standards Council (PCI SSC). To address the critical issue of payment application security, in 2005 Visa created the Payment Application Best Practices (PABP) requirements to ensure vendors provide products which support merchants’ efforts to maintain PCI DSS compliance and eliminate the storage of sensitive cardholder data. See www.visa.com/pabp for more information. The Payment Card Industry Security Standards Council (PCI SSC) will maintain the PA‐DSS and administer a program to validate payment applications’ compliance against this standard. The PCI SSC now publishes and maintains a list of PA‐DSS validated applications. See https://www.pcisecuritystandards.org/security_standards/pa_dss.shtml for more information. VI
