PCI DSS and penetration testing

PCI DSS

PCI DSS (Payment Card Industry Data Security Standard) is a set of security controls created to ensure all companies that accept, process, store or transmit credit card data maintain an audit-ready environment. Version 4.0 was published in March 2022; organizations required to be compliant have until March 31, 2024, when compliance must be complete.

The most noteworthy upgrades in PCI DSS version 4.0 to Requirement 11 which are applicable to all organizations are that vulnerability scans must be …

accept audit card companies compliance controls credit credit card data data security dss environment industry march organizations payment payment card pci penetration penetration testing process security security controls security standard standard store testing version