PCI 4.0 - The KING is dead, long life to the KING

The king is dead, long live the king!" This traditional proclamation made following the accession of a new monarch in various countries, is definitely applicable in what concerns PCI DSS with the release of PCI 4.0. But wait...do not count your chickens before they are hatched, yes, another quote. Indeed, if the successor to the throne is appointed and can already rule the game, the old rules enacted by the current monarch remain valid until retirement due on march 31, 2024.  This transition period  provides organizations with time to become familiar with the changes in v4.0, update their reporting templates and forms, and plan for and implement changes to meet the new rules of the game. 

In addition to the transition period, organizations have until 31 March 2025 to comply with about 50 new requirementsthat are initially identified as best practices in v4.0. Prior to this date, organizations are not required to validate to these new requirements. However, organizations that have implemented controls to meet the new requirements and are ready to have the controls assessed prior to their effective date are encouraged to do so. After 31 March 2025, these new requirements are effective and must be fully considered as part of a PCI DSS assessment.

Track these "new requirements" with the new version of the PCI Compliance dashboard fully aligned with PCI DSS V4.0. It includes the defined approach requirements, the customized approach, applicability notes, purpose, good practices & further information, definition, example and defined testing procedures and prioritization approach. It also provides templates to register your compensating controls, controls met with remediations but also to register your customized Controls, the customized approach risk analysis, execution of vulnerability scans and penetration tests. A must to stay in the lead of your compliance journey. 
​
Get your PCI 4.0 Compliance dashboard right here