You are here:

PCI SSC North America 2025: What Businesses Need to Know

The PCI Security Standards Council (PCI SSC) North America Community Meeting will be held on September 16–18, 2025, in Fort Worth, Texas, bringing together merchants, service providers, assessors, regulators and technology vendors to shape the future of payment security.

The 2025 meeting is especially important with the release of PCI DSS v4.0.1 and updated Report on Compliance (ROC) templates, which impact audits, reporting and vendor relationships. Attending offers businesses direct insights from PCI experts and preparation for the next phase of compliance.

Ready to simplify PCI DSS v4.0.1?

Our PCI QSA expert team at ValueMentor will help you translate conference insights into an actionable compliance roadmap. Book a PCI Gap Assessment Today.

What is the PCI SSC North America Community Meeting?

The PCI SSC hosts annual community meetings to update stakeholders on security standards and foster collaboration. The North America Community Meeting 2025 in Fort Worth will feature three days of plenary sessions, breakout discussions and Tech Talks where vendors demonstrate solutions tailored to PCI requirements.

Participants include:

  • Merchants processing card payments
  • Service providers handling data and infrastructure
  • Qualified Security Assessors (QSAs)
  • Vendors offering compliance and security technologies
  • Regulators and payment brands

The purpose of the event is to bridge the gap between compliance mandates and business execution. Companies gain clarity on technical updates, upcoming deadlines and practical methods to reduce compliance costs while improving security posture. costs while improving security posture.

Why 2025 is Especially Important for Businesses

The 2025 meeting comes at a critical time. In October 2024, the PCI SSC released PCI DSS v4.0.1, a maintenance update to the landmark v4.0 standard. This update introduced:

  • Clarifications to requirement language
  • Adjustments to testing procedures
  • New ROC reporting templates that every organization undergoing a full assessment must now use

For businesses, this means compliance strategies built around older templates or interpretations may fall short. The Fort Worth event will provide direct explanations from PCI SSC representatives, ensuring that attendees understand how these changes affect:

  • Annual audits and reporting obligations
  • Service provider contracts that reference PCI requirements
  • Internal security programs aligned with v4.0.1

Organizations that fail to adapt could see higher audit costs, longer remediation timelines and increased scrutiny from acquirers and card brands.

Key PCI Standards Beyond DSS

While PCI DSS is the most widely known, the Council oversees multiple standards that businesses must understand. These will also be discussed at the 2025 meeting:  is the most widely known, the Council oversees multiple standards that businesses must understand. These will also be discussed at the 2025 meeting:

PCI DSS (Data Security Standard)

Payment security cornerstone, PCI DSS Stipulates the technical and procedural measures that should be taken in safeguarding cardholder information. The migration to v4.0.1 focuses on flexibility in compliance with controls, better authentication requirements and better reporting at the audit level.

PCI 3DS (3-D Secure Standard)

3DS is compliant with PCI and allows online payments with secure authentication so that the card’s genuine cardholder is the one utilizing the card. The standard is crucial in mitigating card-not-present fraud as the number of online payments expands. Companies that use 3DS have better fraud protection as well as minimized chargeback exposure.

PCI PIN (PIN Security Standard)  

PCI PIN sets out the requirements for securing the protection of the PIN during online and offline operations. The standard regulates encryption, device security and key management in ATMs and point-of-sale devices. For banks and service providers, the use of PCI PIN is required as part of building confidence among cardholder payment pathways. Collectively, these standards establish a multi-faceted security framework — safeguarding data storage (DSS), ensuring transaction authentication (3DS), and maintaining PIN confidentiality (PIN). During the meeting in Fort Worth, companies will be presented with the opportunity to investigate the interconnections of these frameworks and the forthcoming updates.

Inside Fort Worth PCI SSC 2025 – Tracks, Tech Talks & Vendor Showcase

The meeting agenda is designed to provide value to different audiences:

  • Plenary sessions: Strategic updates on the Council’s priorities and payment ecosystem risks.
  • Breakout tracks: Focused on merchants, service providers and assessors with detailed sessions on compliance execution.
  • Tech Talks: Short, targeted presentations where vendors showcase innovations that support PCI compliance.

Vendor showcase: An exhibition floor to meet solution providers, compare tools and book consultations.

ValueMentor Unveils V-TRUST at PCI SSC Event

At the Fort Worth event, ValueMentor will officially launch V-TRUST – our new methodology for cyber and compliance excellence.

V-TRUST is designed to help organizations simplify compliance, cut costs, and reduce audit fatigue, while building stronger digital trust. The framework covers the full compliance journey – from gap assessments and consulting to implementation, documentation, audit assistance, and certifications.

With V-TRUST, companies can:

  • Achieve faster audit readiness
  • Strengthen digital trust and customer confidence
  • Redirect valuable resources toward business growth instead of paperwork

Visit us at Booth #66 to see how V-TRUST transforms compliance into a true strategic advantage.

Practical Business Outcomes You’ll Gain by Attending

Attending the 2025 Community Meeting offers tangible outcomes for organizations:

  1. Clarity on PCI DSS v4.0.1 requirements — Learn directly from PCI SSC experts how the latest updates affect audits and SAQs.
  2. Audit efficiency — Discover strategies to streamline evidence collection and reduce “audit fatigue.”
  3. Vendor evaluation — Shortlist products and services that meet compliance requirements while supporting operational goals.
  4. Peer benchmarking — Compare your compliance maturity against similar organizations.
  5. Risk reduction — Translate compliance into stronger customer trust and reduced breach exposure.

Companies that attend with clear objectives can return with a prioritized compliance action plan.

Make Every Minute Count at PCI SSC 2025

A structured approach ensures you make the most of the event:

Before the event

  • Conduct a quick PCI gap assessment
  • Identify which sessions map to your pain points
  • Schedule meetings with vendors and QSAs in advance

During the event

  • Attend breakout sessions relevant to your role
  • Collect practical templates and case studies
  • Take notes on vendor demos and cross-check with your needs

After the event

  • Debrief your internal team within one week
  • Update compliance plans based on key insights
  • Assign owners for remediation or new initiatives

How to Spot Real Values in Vendor Demos

Vendor demos and Tech Talks are highlights of the PCI SSC Community Meeting, but not every presentation delivers real business impact.

To get the most out of your time, focus on:

  • Compliance Alignment – Does the solution meet PCI DSS v4.0.1 and related standards like PIN or 3DS?
  • Integration & Scalability – Can it be deployed without costly disruptions?
  • Proven Results – Look for case studies, references, or measurable outcomes.
  • Ongoing Support – Does the vendor provide training, updates, and long-term guidance?
  • True ROI – Consider the overall cost versus the tangible value delivered.

By using these filters, you can separate polished marketing pitches from solutions that actually strengthen compliance, reduce risk, and deliver measurable results.

Stakeholders-Focused Strategies: Making PCI SSC 2025 Work for you

  • Merchants: Focus on SAQ simplification and reducing cardholder data exposure.
  • Service providers: Understand contract updates tied to v4.0.1 and validate your compliance strategy.
  • Assessors (QSAs/ISAs): Gather Council updates to refine audit methodology.
  • Vendors: Use Tech Talks to highlight customer-centric innovations.

All Stakeholders leave with actionable insights, valuable connections and a clearer compliance roadmap.

Post-Event Action Plan: Turn Insights into Action

Attending PCI SSC North America Community Meeting 2025 is just the first step. To maximize impact, take these actions after the event:

  • Summarize session insights, share updates with your team and identify compliance gaps.
  • Update policies, remediation plans, and internal procedures to align with PCI DSS v4.0.1.
  • Implement priority fixes, engage vendors and prepare evidence for your next assessment cycle.

Working with ValueMentor accelerates this process, helping you turn conference learnings into measurable compliance progress and stronger payment security.

Resources & Official Reading List

Final Thoughts

The PCI SSC North America Community Meeting 2025 is where compliance requirements, security challenges, and business goals align. Attendees will leave with practical updates on PCI DSS v4.0.1, stronger vendor connections, and a clear path toward compliance success.

Don’t let those insights fade. Book your PCI Gap Assessment with ValueMentor today and turn conference knowledge into measurable results. Or, if you’re attending, visit us at Booth #66 to see how our V-TRUST methodology can simplify compliance and strengthen payment security.

FAQs


1. When is the PCI SSC North America Community Meeting 2025?

September 16–18, 2025, Fort Worth, Texas.


2. Who should attend from my company?

CISOs, compliance managers, payment security teams, vendor managers and IT leaders.


3. Is PCI DSS v4.0.1 mandatory?

Yes, the update applies to all entities under PCI DSS v4.0, with clarifications and revised ROC templates.


4. Can I meet vendors at the event?

Yes, the vendor showcases and Tech Talks are designed for solution exploration.


5. Where can I find ValueMentor at the event?

ValueMentor will be available at Booth #66 during the vendor showcase. Make sure to stop by to discuss PCI DSS v4.0.1 readiness and schedule a consultation with our experts.


6. How can ValueMentor support my business?

ValueMentor offers PCI gap assessments, QSA audits and tailored compliance roadmaps to help you act on insights gained at the meeting.

Table of Contents

Protect Your Business from Cyber Threats Today!

Safeguard your business with tailored cybersecurity solutions. Contact us now for a free consultation and ensure a secure digital future!

Ready to Secure Your Future?

We partner with ambitious leaders who shape the future, not just react to it. Let’s achieve extraordinary outcomes together.

I want to talk to your experts in:

Related Blogs

Official PCI DSS certification document with seal, ribbon, and signing tools, representing the process, cost, and consultancy services for PCI DSS certification in India
Cybersecurity professional performing penetration testing on a laptop, representing PCI DSS 4.0.1 testing requirements and security assessment scope
3D credit card with secure chip and abstract digital elements, representing PCI DSS compliance and payment card security in Dubai