PCI DSS V4.0 – the one thing you should do (for now)

PCI compliance is evolving with the introduction of PCI DSS V4.0, which represents the biggest set of changes to PCI DSS since version 3.2.1, which the PCI Council released in 2018.

You need to be PCI DSS compliant if you handle payment card data, either as a merchant or processor. That requirement is unchanged (see our Ultimate Guide to PCI Compliance for more details). Still, the consequences of the move to PCI DSS 4.0 could be significant for many organisations and will add to the complexity of your annual compliance assessment. 

For the next two years, until March 2024, you effectively have the option to be compliant with either v3.2.1, as you will be now, or transition to v4.0. Which route to go down will depend on a number of factors, such as your desire to meet the latest standards and ‘future-proof’ your compliance, or a preference to stick with the existing version while aligning with the new requirements in a planned manner over the next two years.

To help remove uncertainty and provide clarity around what it means and what you will need to do, Securious will be running a free webinar to help guide you with the process of transitioning from version 3.2.1 to version 4.0. 

So for now, all you need to do to prepare your organisation for the transition to PCI V4.0, is sign up for our webinar, which will be in September. 

It’s for anyone who is responsible for PCI DSS compliance (including service providers and merchants).

In our PCI DSS V4.0 webinar, we’ll cover: 

• What is PCI DSS 4.0?
• How is it different from PCI DSS 3.2.1?
• When does it come into effect?
• What might I need to change?
• How can I get further help?
• Questions from participants

Sign up for more information and to secure one of the limited spaces on our webinar using the form below. If you want to talk to one of our PCI QSAs about PCI v4.0 before then, get in touch and we’ll happily talk you through it.