PCI DSS v4.0.1: future-dated requirements in force
Since 31 March 2025 the requirements that were best practice under PCI DSS 4.0 are mandatory: script management on payment pages, phishing protection, authenticated vulnerability scans, twelve-character passwords, multi-factor authentication for all access into the cardholder data environment and more. Any organisation taking card payments, including ferry and port operators, is affected.
PCI Security Standards Council Date reported, not yet checked against the official text.
Ticks are kept in this browser only. Sign in to the client portal to share them with your team.