What's new in v4.0.1: migration from 3.2.1, the customized approach, MFA and phishing controls, cryptographic agility, and the compliance deadlines. ← Back to PCI DSS: The Complete Guide
Guide | Focus |
|---|---|
PCI DSS 4.0 Migration Guide: Transitioning from Version 3.2.1 | Moving from 3.2.1 to 4.0.1 |
PCI DSS 4.0 Customized Approach: Flexible Implementation Options | Flexible implementation |
PCI DSS 4.0 Multi-Factor Authentication Expansion: Enhanced Requirements | Expanded MFA requirements |
PCI DSS 4.0 Account Takeover Prevention: New Security Measures | Account takeover prevention |
PCI DSS 4.0 E-commerce Security: Enhanced Web Application Requirements | Enhanced e-commerce controls |
Anti-phishing controls | |
PCI DSS 4.0 Cryptographic Agility: Encryption Algorithm Management | Algorithm management |
PCI DSS 4.0 Third-Party Service Provider: Enhanced Vendor Management | Enhanced vendor management |
PCI DSS 4.0 Targeted Risk Analysis: Risk-Based Security Approach | Targeted risk analysis |
PCI DSS 4.0 Implementation Timeline: Compliance Deadlines and Milestones | Deadlines and milestones |
Resources: Gap Analysis Tool · 12-Requirements Checklist · PCI DSS Glossary