Who Decides PCI DSS Scope? The August 2026 PCI SSC FAQ #1331 Update Explained
Ever been in a meeting where everyone thinks theyâre in charge until the real boss walks in? Thatâs what just happened in the PCI DSS community. On August 4, 2026, the PCI Security Standards Council (PCI SSC) dropped a revised FAQ #1331, and itâs a game-changer for anyone involved in merchant PCI DSS assessments. Hereâs the headline: Merchants and QSAs donât get to decide if SAQ eligibility canâŠ










