As cited
Copy frozen at (site build).
regulatory
PCI SSC calls for human approval of AI agent actions involving cardholder data
The PCI Security Standards Council published guidance on securing artificial intelligence (AI) systems used in payment environments, covering governance, deployment, access controls, testing, and alignment with existing PCI standards. The document, developed with industry partners, recommends human approval for AI agent actions that involve cardholder data and addresses defenses against AI-assisted attacks.
Why it matters: Payment processors, merchants, and service providers handling cardholder data should review this guidance to determine what additional AI governance and controls are needed in their environments, as recommendations may influence future PCI compliance expectations.
- Source published
- First seen by Cybersecurity Tracker