ISO/DIS 18960

Security controls and implementation guidance for third party payment service providers

Scope

This document provides security controls and implementation guides for the third party payment service providers (TPPSPs). These security controls consist of
- Security governance control group
- Cross-sectional control group
- Section-specific control group
- Audit and assurance control group

In ISO/AWI TS 9546, the guidelines for security framework of information system of TPP services are covered, while this proposal deals with all the matters necessary for deployment and operation of the system which is made in compliance with the ISO/AWI TS 9546. So, this document deals with the overall security controls of TPPSPs, from developing and testing to installing, operating and auditing the system.