PCI DSS

The Payment Card Industry Data Security Standard is a contractual framework enforced by card networks. PCI DSS v4.0 became mandatory in March 2025. Assessments are performed by Qualified Security Asse

The Payment Card Industry Data Security Standard is a contractual framework enforced by card networks. PCI DSS v4.0 became mandatory in March 2025. Assessments are performed by Qualified Security Assessors (QSAs); smaller merchants can self-assess with an SAQ.

Key controls

• Build and maintain a secure network
• Protect stored cardholder data
• Maintain a vulnerability management program
• Implement strong access control measures
• Regularly monitor and test networks
• Maintain an information security policy