The 5 Simple PCI DSS Requirements That Govern Third Party Service Providers (TPSPs) Can Make or BreakYour PCI DSS Compliance Program
We understand the importance of TPSPs. They’re critical to the success of your business. However, just because you use a TPSP doesn’t mean you stop paying attention to what PCI DSS requires from you. There are 5 simple PCI DSS requirements that govern TPSPs and it’s all too easy to screw them up.
One of the biggest challenges that we help our clients solve revolves around PCI DSS requirements 12.8.1 – 12.8.5.
For example, if you use a TPSP hosted payment page or iFrame, you can significantly reduce your PCI DSS scope; however, this doesn’t make your PCI DSS Compliance responsibilities magically disappear.
What we’ve seen and heard from organizations is if they use a TPSP, PCI Compliance becomes “out of sight, out of mind.”
We’ve also encountered TPSPs who don’t think they need to provide their clients any kind of documentation.
It’s vital that you manage your TPSPs for PCI DSS Compliance so you don’t fall short during your own SAQ or Report on Compliance assessment.
How Payment Card Assessments Can Help You Manage Your In Scope TPSPs
Save the date and invite your colleagues, co-workers, and maybe even your TPSPs.
On March 25th, we’re going to dive into 5 simple PCI DSS Requirements that can make or break your program. Requirements 12.8.1 – 12.8.5 are about the TPSP Program that you maintain and manage. We’ll also take a peak at requirements 12.4 and 12.9 that are specific to TPSPs.
Third Party Service Providers: Weakest Link or Strongest Ally
When: March 25, 2026
Time: 4 PM EST
Where: Online
Cost: FREE!
This live session is FREE!!
Will you be joining us?
We recently launched a training bundle specific to managing TPSPs and what you need to prove your PCI DSS Compliance with requirements 12.8-12.8.5.
Remember: these requirements apply to all merchants regardless of merchant level or SAQ eligibility.
In this 20 minute training, we break down PCI DSS requirement 12.8 and 12,9 so you have a full understanding of what you must have in place, regardless of your merchant level, to meet sub-requirements 12.8.1-12.8.5.
If you’re a TPSP, we’re covering PCI DSS requirement 12.9 because as a TPSP, you must help your customers with PCI Compliance.