Blog

PCI Security Standard Council Announces New SLA Timelines - Effective September 27, 2023

Date Published:
September 20, 2023

Josh Gottlieb

Managing Consultant – Americas

SHARE ON

The PCI Security Standard Council (PCI SSC) has stated they are modifying the Assessor Quality Management (AQM) submission timelines. The new SLA will be effective September 27, 2023.

According to the PCI SSC, the AQM will move from a 30 calendar-day SLA to a 30 business-day SLA. This change could increase review times.

It's important to note that the SLA is in place for each iteration of the report review. Organizations should plan for 2-3 report reviews as part of their timeline including the SLAs. The new SLAs apply to not only first submissions to the AQM team but all resubmissions that are required.

‍

Please Note - VikingCloud contracted SLAs are not changing.

‍All organizations submitting reports, including change-related submissions, for the following assessment types should adjust expectations as necessary.

  • Secure SLC
  • Secure Software
  • P2PE Solutions
  • P2PE Components
  • P2PE Applications

For more details about the changes or if you have questions about how they may affect your organization, contact the VikingCloud team https://vikingcloud.com/contact.

SHARE ON

Related Blogs

Stay up-to-date on the latest happenings in Cybersecurity and PCI Compliance.

Oct 12, 2026
Blog
Cybersecurity
Managed Detection and Response
Blog
Oct 12, 2026

MDR Use Cases: Real-World Examples of Stopping Cyberattacks

Learn More
Oct 13, 2026
Blog
Cybersecurity
Blog
Oct 13, 2026

Why More Visibility Won't Contain the Distributed Enterprise Blast Radius

Learn More
Oct 5, 2026
Blog
Cybersecurity
Blog
Oct 5, 2026

What Is a Compromise Assessment?

Learn More