PCI DSS Version 4.0.1 - A Guide to the Payment Card Industry Data Security Standard
by Stephen Hancock
FOREWORD
All target dates for compliance with the PCI DSS have long since passed. The Standard is now on its fourth version, v3.2.1 having been withdrawn from 31 March 2024. Many organisations around the world – particularly those that fall below the top tier of payment card transaction volumes – are not yet compliant.
There are three possible reasons for this.
The first is that, outside a few US states, the PCI DSS has no legal status: it is not a law and does not have the force of law. Enforcement can only be carried out by contractual means, in a competitive payment card marketplace. The UK’s Information Commissioner, however, has said that compliance with the PCI DSS shows due diligence in protecting cardholder data, and has effectively imposed ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access