PCI DSS V4 - Continuous compliance

[Caute_cautim]

Hi All

Standby PCI DSS V4.0 is due this quarter and there are changes a foot in terms of compliance continuously and a wider scope.

https://www.darkreading.com/edge/get-started-on-continuous-compliance-ahead-of-pci-dss-v4-0

Regards

Caute_Cautim

[AppDefects]

I'm going to hold my breath that v4.0 emerge out of draft and land Q1 😎

[Caute_cautim]

I am sure it will, but one should still be prepared. What is potentially different is the scope, and the requirement for continuous compliance - this will definitely stir things up and move people to Cloud monitoring services! Please don't hold your breath for too long, you may turn blue... We cannot risk that....:)

Regards

Caute_Cautim

[Steve-Wilme]

The change to compensating controls is possibly a significant change for organisations and QSA community.  

[Roger4288]

What is potentially different is the scope, and the requirement for continuous compliance - this will definitely stir things up and move people to Cloud monitoring services!

[Caute_cautim]

@Roger4288I agree, apparently PCI DSS V4.0 is due to be released at the end of March 2022, with an 18 month transition period. 

This according to the latest PCI DSS Blog.

Regards

Caute_Cautim