topic Re: PCI DSS V4 - Continuous compliance in Governance, Risk, Compliance

PCI DSS V4 - Continuous compliance

Caute_cautim — Mon, 09 Oct 2023 10:06:40 GMT

Hi All

Standby PCI DSS V4.0 is due this quarter and there are changes a foot in terms of compliance continuously and a wider scope.

https://www.darkreading.com/edge/get-started-on-continuous-compliance-ahead-of-pci-dss-v4-0

Regards

Caute_Cautim

Re: PCI DSS V4 - Continuous compliance

AppDefects — Tue, 15 Feb 2022 20:46:45 GMT

I'm going to hold my breath that v4.0 emerge out of draft and land Q1 😎

Re: PCI DSS V4 - Continuous compliance

Caute_cautim — Tue, 15 Feb 2022 23:47:40 GMT

I am sure it will, but one should still be prepared. What is potentially different is the scope, and the requirement for continuous compliance - this will definitely stir things up and move people to Cloud monitoring services! Please don't hold your breath for too long, you may turn blue... We cannot risk that....:)

Regards

Caute_Cautim

Re: PCI DSS V4 - Continuous compliance

Steve-Wilme — Wed, 16 Feb 2022 13:46:11 GMT

The change to compensating controls is possibly a significant change for organisations and QSA community.

Re: PCI DSS V4 - Continuous compliance

Roger4288 — Thu, 17 Feb 2022 09:04:43 GMT

What is potentially different is the scope, and the requirement for continuous compliance - this will definitely stir things up and move people to Cloud monitoring services!

Re: PCI DSS V4 - Continuous compliance

Caute_cautim — Wed, 02 Mar 2022 04:54:00 GMT

@Roger4288I agree, apparently PCI DSS V4.0 is due to be released at the end of March 2022, with an 18 month transition period.

This according to the latest PCI DSS Blog.

Regards

Caute_Cautim