PCI DSS 4.0
PCI DSS 4.0
PCI DSS 4.0 is the latest version of the standard, released in 2022. It aims to enhance security controls and strengthen the overall security posture of organizations that handle cardholder data.
There are a number of key Changes in PCI DSS 4 – including but not limited to:
- Increased focus on security as a shared responsibility between organizations and service providers.
- Emphasis on the importance of continuous monitoring and risk assessment.
- Enhanced requirements for multi-factor authentication.
- Expansion of encryption and cryptographic key management requirements.
- Introduction of new requirements for secure software development practices.
- Strengthened requirements for service providers, including third-party risk management.
How Long do I Have to Move to PCI DSS 4.0?
The PCI Security Standards Council have created an implementation timeline for businesses to move towards PCI DSS 4.0. All requirements will become effective from the 31st of March 2025.
