PCI DSS v4.0 – New and Mandatory Controls

PCI DSS 4.0 is a set of security standards published by the Payment Card Industry Security Standards Council (PCI SSC) to protect organizations that handle credit and debit card transactions. The standard consists of 12 mandatory requirements, divided into two main categories: technical and operational.

The new standard put forth new requirements and revised control sets. The 64 new requirements have been mentioned in the new standard. Out of this, 13 are to be implemented effective immediately and 51 would be required to be complied with by 31st March 2025.

Overall, PCI DSS 4.0 is designed to ensure that organizations are doing their utmost to protect cardholder data and prevent fraud. By following the requirements, organizations can help ensure that their customers’ data is secure and that their operations remain compliant with industry standards.

Who Should Download This PCI DSS Controls Guide?

• Merchants preparing for PCI DSS assessment.
• Service providers updating compliance programs.
• Banks and financial institutions reviewing control gaps.
• Call centres handling cardholder data.
• BPOs supporting payment-related processes.
• Organizations preparing for PCI DSS compliance audit.

How QRC Helps Implement PCI DSS Controls

• Gap assessment.
• Scope finalization.
• Control applicability review.
• Remediation roadmap.
• Evidence review.
• Audit readiness.

If your organization is unsure which PCI DSS v4.0.1 controls apply to your environment, QRC’s pci dss compliance certification can help validate scope, identify gaps, and prepare a practical remediation roadmap.