PCI DSS v4.0 (Payment Card Industry Data Security Standard Version 4.0) is the latest version of the PCI DSS framework, which uses the latest security standards, protocols and policies to increase the security of user’s card and debit transaction data or information.
Compliance levels depend on the transaction volume and company/organization size, there are 4 levels of compliance.
- Prioritizes addressing specific security risks and threats which are unique to each company/organization’s environment.
- Increasing MFA requirements in more advanced areas, such as sensitive systems and administrative access.
- New requirements for secure software development practices, such as testing security standards and handling vulnerabilities.
- More detailed requirements for ongoing monitoring and security testing.