Payments and controls
PCI DSS scope follows payment account data—not the TMS label
PCI DSS supplies baseline technical and operational requirements for protecting payment account data. It does not apply to every treasury workflow or certify an entire treasury platform because one module supports card-related payments.