Contact us
Regulatory and protocol clock Standard or protocol · International

PCI DSS v4.0.1: future-dated requirements in force

Future-dated requirements became mandatory on 31 Mar 2025, 2 years ago.

31 Mar 2025 2 years ago Already applies

PCI DSS v4.0.1: future-dated requirements in force

Future-dated requirements became mandatory · PCI DSS v4.0.1 · PCI Security Standards Council

IndustryInfrastructureMaritime International Standard or protocol

Since 31 March 2025 the requirements that were best practice under PCI DSS 4.0 are mandatory: script management on payment pages, phishing protection, authenticated vulnerability scans, twelve-character passwords, multi-factor authentication for all access into the cardholder data environment and more. Any organisation taking card payments, including ferry and port operators, is affected.

PCI Security Standards Council Date reported, not yet checked against the official text.

What to do 0 of 4 done

Ticks are kept in this browser only. Sign in to the client portal to share them with your team.

Need this tracked for your fleet or plant?

In the client portal the same checklist is shared with your team, the ticks are kept, and the entry sits next to the registers that prove what you did.