PCI DSS - Preparing for v4.0

Ideal time to prepare for transitioning to PCI v4.0

It has been nearly a year since the PCI Security Standards Council released version 4 of the PCI Data Security Standard (DSS) and a great deal of content has been produced by the Council since the announcement addressing the changes in requirements.  Some of the key changes include more stringent controls for cloud providers and an increased focus on supply chain security, security culture and risk management.  With PCI DSS v3.2.1 being retired in March 2024, the upcoming year is the ideal time for organisations to address the v4.0 requirements in preparation for the transition.  

How to best prepare for the transition

So how should your organisation best prepare for a PCI DSS v4.0 assessment?  In this webinar, our experienced qualified security assessors (QSAs) will guide you through some of the key considerations when getting ready for a v4.0 assessment including:

• Dealing with the new multi-factor authentication requirements
• Implementing the new technical requirements for payment pages
• Ensuring your scope is properly documented
• Ensuring you are ready for the new evidence collection processes
• Addressing the increased focus on supply chain security and risk management
• Considering how remote assessment activities could affect your Report on Compliance (ROC)
• A customised validation approach.

This webinar is applicable to both organisations undertaking a self-assessment questionnaire (SAQ) or a QSA-led assessment.

‍