Payment data, particularly on the client-side, is extremely vulnerable. PCI DSS 4.0 hopes to bring more protections, but what will its impact be? Feroot Security CEO Ivan Tsarynny has some thoughts.
The new regulation will fully come into effect on 31 March 2025 and marks the first major update to the standards since 2013. The PCI Security Standards Council has offered several options to ease compliance. As a result, PCI DSS v3.2.1 will remain in place until March 2024 so firms can take time to grasp the necessary changes. There is an additional year for organisations to implement new requirements identified as best practices and for assessors to complete training.
Despite the implementation being a long time away and a great level of flexibility, Tsarynny urged companies to “start now.” The reason is it requires pre-planning and early implementation to meet the deadlines. The changes to the regulation are substantial and cannot be rushed nearer the deadline.
Read the full article on FinTech Global.
Free Assessment
Security for Everyone that Visits Your Website
Find out if your web application is hiding vulnerable, malicious, or dangerous code that could damage your customers and your business. No payment information required.
More to read:
December 19, 2024
Is Your Hospital Sharing Patient Data with Facebook? A Guide for Security and Privacy Teams
December 17, 2024
Is Your Website Leaking Sensitive Patient Information to Facebook? A disturbing story about HIPAA (and How to Avoid It)
December 15, 2024
Navigating HIPAA Compliance When Using Tracking Technologies on Websites