Today’s Edition: Secure the Bag with PCI DSS and Meet the March Deadline

Achieving Payment Card Industry Data Security Standard (PCI DSS) compliance is crucial for organizations that handle any type of card transactions. PCI DSS sets forth a comprehensive framework of security requirements designed to protect sensitive cardholder data from breaches and unauthorized access.?

Compliance with these standards not only safeguards the integrity of financial transactions but also accelerates sales cycles and builds trust among customers, partners, and stakeholders.

With PCI DSS v4.0 right around the corner, now is the perfect time to brush up on your organization’s compliance status and flag anything that might need updating in order to remain compliant by the March 31, 2024 deadline.

And as always, we’ve got you covered. All things PCI DSS below. ??

PCI DSS v4.0: Everything You Need To Prepare for the March 2024 Deadline

The first implementation deadline for compliance with new PCI DSS v4.0 requirements is March 31, 2024, and the time to transition away from PCI DSS 3.2.1 is looming.

As part of the transition, the PCI SSC has created a phased approach where organizations must align with immediate requirements by March 31, 2024; However, additional items listed as best practices won’t need to be validated until March 31, 2025.

Check out this article which highlights everything you need to prepare for by the March 31, 2024 deadline, including:

• Encrypting or protecting all stored sensitive authentication data.
• Implementing automatic processes and systems to detect and protect personnel against phishing attacks.
• Having a web application firewall in place for any web applications exposed to the internet.
• Keeping an inventory of all known scripts used on web pages to mitigate malicious scripts.
• Implementing multi-factor authentication (MFA) for all accounts with access to cardholder data.

And more!

From Drata's Experts

What Is a PCI ROC + When Do You Need One?

In this post, we’ll cover everything you need to know about a PCI ROC, including who needs one, how the process works, and what to do if you fail it.

PCI DSS Compliance Checklist: Understanding the 12 Requirements

We dive into each of the 12 requirements and offer a helpful PCI compliance checklist to reference as you embark on your PCI DSS journey.

Choosing the Right PCI SAQ for Your Business

There are eight different types of PCI self-assessment questionnaires. Check out this article to learn which one is right for your organization.

PCI DSS Audit: What It Is + How to Prepare

A PCI DSS audit is an examination of the security of your cardholder data environment (CDE)? against the requirements of the PCI DSS.?

This rigorous audit can be performed by a Qualified Security Assessor (QSA) that works for a QSA firm—independent security professionals that have been qualified by the PCI Security Standards Council (PCI SSC).

To help you prepare for and pass an upcoming PCI DSS audit, this blog post outlines what you need to do before, during, and after, including:

• Approving your assessment scope.
• Completing a gap assessment.
• Gathering documentation.
• Engaging a QSA to lead the audit.
• Addressing control gaps found in the ROC.
• Continuously monitoring your PCI DSS compliance.

Around the Web

Using PCI DSS V4.0 To Modernize Identity Frameworks And Controls | Forbes

How a 27-Year-Old Codebreaker Busted the Myth of Bitcoin’s Anonymity | Wired

American Hospital Association Sues Over Updated HIPAA Guidance | Policy & Medicine

Secured Jobs

GRC Senior Analyst | Salesforce | Remote

Cyber Threat Analyst | CIA | Washington, D.C.

Asset Management Compliance - Regulatory Team, Vice President | Goldman Sachs | New York, NY

Helpful Resources

Trusted is currently published twice a month and is designed to share the latest resources from around the compliance, risk management, and cybersecurity space. If you have suggestions or would like to include a recent article or podcast, please let us know.

?? Secured, The Drata Community

↘? Trusted: Share our newsletter with others

?? Upcoming webinars

??Drata Customer Stories