PCI v3.2.1 is here!

PCI Security Standards Council released PCI DSS v3.2.1 as a minor update that primarily clarifies existing language and corrects a requirement reference. Key points include updated guidance allowing certain POS/POI devices and service provider termination points to continue using SSL/early TLS if not susceptible to known exploits, clarification that merchants (not service providers) are responsible for outdated POS devices, and a transition timeline allowing continued use of v3.2 through the end of 2018 with Reports on Compliance in 2019 required to reference v3.2.1.