September 2019
Intermediate to advanced
58 pages
58m
English
Once an organisation has achieved compliance with the PCI DSS, it must maintain its level of compliance. This means being aware of any changes to the PCI DSS itself (the latest version was released in May 2018), as well as maintaining the PCI DSS security environment.
Any changes to in-scope systems, processes and technologies must be implemented in a PCI DSS-compliant manner, and their effect on compliance assessed and recorded. If it is significant change, all requirements that are mandatory to be revaluated after a significant change must be completed and the result recorded.
All PCI DSS processes must be followed and maintained at all times throughout the period between recertifications.
The PCI SSC makes ...
Read now
Unlock full access