The Definitive Guide to PCI DSS Version 4: Documentation, Compliance, and Management

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2023

A. B. Cooper Jr. et al.The Definitive Guide to PCI DSS Version 4https://doi.org/10.1007/978-1-4842-9288-4_16

16. The Customized Approach, Compensating Controls, and the Targeted Risk Analysis

Arthur B. Cooper Jr.¹  , Jeff Hall², David Mundhenk³ and Ben Rothke⁴

(1)

Colorado Springs, CO, USA

(2)

Minneapolis, MN, USA

(3)

Austin, TX, USA

(4)

Clifton, NJ, USA

 

Overview

PCI has always allowed folks to use “compensating controls” to meet any requirement they are unable to meet using the defined control within the PCI requirements. This has been the norm for all versions of the PCI DSS until now. Version 4.0 brings us the new “customized approach.” Ever since the 2019 PCI ...