In response to the evolving landscape of cybersecurity threats, the Payment Card Industry Data Security Standard (PCI DSS) has introduced several new controls in its latest version, v4.0. These controls are designed to enhance the security of cardholder data and ensure robust protection against potential vulnerabilities. The new requirements encompass a wide range of measures, including data retention and encryption policies, multi-factor authentication, vulnerability management, and incident response procedures. For service providers, additional controls focus on logical separation, penetration testing, and secure reporting mechanisms. By implementing these controls, organizations can better safeguard sensitive information, maintain compliance, and address emerging threats effectively.

Download the PCI DSS 4.0 Technical Guidance on Best Practice Requirements