PCI SSC Publishes AI Security Guidance for Payment Environments

The PCI Security Standards Council (PCI SSC) has published "Security Considerations for AI Systems," guidance developed with industry stakeholders that covers protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. The document addresses governance, deployment, access controls, testing, and the application of PCI standards. The recommendations are advisory, and existing PCI requirements take precedence over this new guidance. The guidance specifically calls for human approval of AI agent actions involving cardholder data.