PCI DSS (Payment Card Industry Data Security Standard) is the security framework required for any organization that processes, stores, or transmits credit card data. PCI DSS v4.0 (2022) includes 12 requirements covering network security, data protection, vulnerability management, access control, monitoring, and information security policies. Non-compliance can result in fines and loss of card processing privileges.
| Version | PCI DSS v4.0 (effective March 2024) |
| Requirements | 12 core requirements, 300+ sub-requirements |
| Applicability | Any entity handling cardholder data |
| Levels | Merchant Level 1–4 based on transaction volume |
| Auditors | Qualified Security Assessors (QSA) |