Streamlined Onboarding Announced for MPoC Labs

The PCI Security Standards Council (PCI SSC) is pleased to announce a simplified onboarding process for laboratories seeking to conduct Mobile Payments on COTS (MPoC) evaluations and become MPoC-certified labs. This new streamlined approach removes previous barriers to entry while maintaining the Council’s rigorous security and quality standards.  

Previously, laboratories interested in conducting mobile payment evaluations were required to first achieve PTS (PIN Transaction Security) laboratory status – a comprehensive process that typically took 12-18 months and required partnership with both a sponsor vendor and control laboratory. Recognizing the need for a more efficient path for laboratories focusing exclusively on mobile payment solutions, the Council has developed a new, modular approach.  

Under the new framework, laboratories interested solely in conducting software evaluations for mobile payment solutions, can now pursue MPoC laboratory status directly, without first becoming a PTS laboratory. To further facilitate this process, PCI SSC will provide standardized test artifacts, eliminating the need for laboratories to secure vendor sponsorship.  

Laboratories seeking PCI approval for MPoC evaluations will need to complete the following steps:

1. Initial Contact: Interested laboratories should email pcipts@pcisecuritystandards.org to initiate the process.
2. Documentation Phase:
   • • • • Completion of pre-audit documentation
         • Payment of administrative fees 
3. Technical Assessment: 
   • • • • Evaluation of PCI-provided test artifact assessment against current MPoC standard 
4. Laboratory Audit:
   • • • • Review of laboratory policies and procedures
         • On-site facility inspection to verify compliance with lab general requirements 

The PCI SSC Laboratory Management team will provide guidance and support throughout the onboarding, ensuring laboratories understand the process and can successfully meet all requirements. Laboratories interested in becoming PCI approved for MPoC certification are encouraged to reach out to the Council’s Laboratory Management team. This new streamlined process represents the Council’s ongoing commitment to evolving our programs to meet industry needs while maintaining the security standards that protect payment data globally.