{"schema":"postcutoff/event@1","as_of":"2026-10-12T07:22:00+02:00","url":"https://postcutoff.com/e/2026-10-07-pci-ssc-security-considerations-ai-systems/","md":"https://postcutoff.com/e/2026-10-07-pci-ssc-security-considerations-ai-systems/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"Adam Bicz","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-10-07-pci-ssc-security-considerations-ai-systems","date":"2026-10-07","date_precision":"day","short_title":"Payment-card standards body PCI SSC publishes 'Security Considerations for AI Systems'","deck":"Human approval or 'monitored autonomy' for agent actions on cardholder data, least agency, AI inventories","takeaway":"On Oct 7, 2026 the PCI Security Standards Council, which sets the card industry's PCI DSS rules, published advisory guidance on securing AI in payment environments.","category":"policy-safety","category_label":"Policy & safety","importance":2,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":[{"n":1,"title":"PCI SSC: Security Considerations for AI Systems v1 (PDF)","url":"https://docs-prv.pcisecuritystandards.org/Guidance%20Document/AI/PCI_SSC_Security_Considerations_for_AI_Systems_v1.pdf","type":"official","group":"primary","domain":"docs-prv.pcisecuritystandards.org"},{"n":2,"title":"PCI SSC press release: additional guidance on securing AI in payment environments","url":"https://www.pcisecuritystandards.org/?p=64616","type":"official","group":"primary","domain":"pcisecuritystandards.org"},{"n":3,"title":"Help Net Security: PCI SSC calls for human approval of AI agent actions involving cardholder data (Oct 9)","url":"https://www.helpnetsecurity.com/?p=387393","type":"press","group":"press","domain":"helpnetsecurity.com"}],"official":2,"filed":"2026-10-11","updated":"2026-10-11","orgs":["PCI Security Standards Council"],"title":"Payment-card standards body PCI SSC publishes 'Security Considerations for AI Systems': human approval or 'monitored autonomy' for agent actions on cardholder data, least agency, AI inventories","summary":"On Oct 7, 2026 the PCI Security Standards Council, which sets the card industry's PCI DSS rules, published advisory guidance on securing AI in payment environments. It asks for explicit human approval of AI-agent actions on cleartext cardholder data, or a defined \"monitored autonomy\" regime with permitted actions and shutdown triggers. It also recommends a least-agency design, an AI inventory and bill of materials, adversarial testing, and no use of the organisation's data for model training by AI vendors.","key_facts":["Published Oct 7, 2026 (press release; Help Net Security coverage Oct 9); developed with the Global Executive Assessor Roundtable (GEAR) and the PCI SSC Board of Advisors. Advisory: existing PCI requirements take precedence","Agents and cardholder data: explicit human approval for AI-agent actions involving cleartext cardholder data, or 'monitored autonomy' with defined permitted actions, approval requirements and shutdown triggers","Least agency: limit each system to the access and capabilities its task needs; avoid combining sensitive-data access, external communication and unrestricted untrusted input in one AI system","AI inventory / bill of materials listing models, versions, hosting, integrations, data-use and retention policies and intended users; controls against shadow AI","A named human should formally accept responsibility for AI output; adversarial testing before broad functional testing; incident-response plans covering prompt injection, model poisoning and unauthorized tool access; keep credentials out of prompts, context, outputs and logs","Third parties: assess AI providers under service-provider requirements and explicitly prohibit training on the organisation's data","Gina Gobeyn, PCI SSC executive director: 'As AI is increasingly used in payment environments, there is an obligation for all parties to ensure the technology is used responsibly.'"],"key_numbers":[],"tags":["payments","agents","security","guidance","cardholder-data","least-agency","human-in-the-loop","ai-bom"],"science":null,"body_md":"## What happened\n\nThe body behind PCI DSS issued its first detailed guidance on AI systems and agents that touch payment data. It is not a new mandatory\nrequirement, but assessors and merchants use such guidance to interpret the standard.\n\n## Why it matters\n\nCard payments are one of the first regulated areas to write down rules on how much autonomy an agent may have. This comes as agentic\nshopping and payment products spread.","disputed":[],"related":[{"id":"2026-10-10-nadella-models-as-insider-risks","url":"https://postcutoff.com/e/2026-10-10-nadella-models-as-insider-risks/","date":"2026-10-10","date_precision":"day","short_title":"Nadella's X Article 'Models as Insider Risks in the Super Intelligence Era'","deck":"Treat frontier models like insiders who may be compromised, and make CoT transparency non-negotiable","takeaway":"On Oct 10, 2026 Microsoft CEO Satya Nadella published an X Article arguing that today's \"Super Intelligence systems\" are nested black boxes that cannot be trusted on a provider's word.","category":"policy-safety","category_label":"Policy & safety","importance":4,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":8,"official":1,"filed":"2026-10-10","updated":"2026-10-11","orgs":["Microsoft"]},{"id":"2026-09-29-robinhood-agents","url":"https://postcutoff.com/e/2026-09-29-robinhood-agents/","date":"2026-09-29","date_precision":"day","short_title":"Robinhood launches Robinhood Agents, in-app AI agents that build strategies and trade on users' behalf","deck":null,"takeaway":"It is one of the first mass-market consumer products where AI agents move real money on their own.","category":"agents","category_label":"Agents","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":4,"official":1,"filed":"2026-10-01","updated":"2026-10-01","orgs":["Robinhood","OpenAI"]}],"people":[],"posts":[],"videos":[],"models":[],"changes":[{"date":"2026-10-11","type":"filed","text":"Created"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-10-11","run":null,"sources_read":null,"updated":"2026-10-11","human_review":null,"version":{"date":"2026-10-11"}},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":160,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":99,"in_training_data":false},{"model_id":"gemini-3-8-flash","name":"Gemini 3.8 Flash","cutoff":"2026-03","days_after":190,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":129,"in_training_data":false}],"short_url":null}