From tripwire.com
The Payment Card Industry Security Standards Council has released its first update to their Data Security Standard (PCI DSS) since 2018. The new standard, version 4.0, is set to generally go into effect by 2024, but there are suggested updates that are not going to be required until a year after that. This, of course, creates a couple of problems for those who want to phase in the new standard. One problem in particular is that the linguistic approach in the new version seems to have a lighter touch than the earlier version. This less-prescriptive language raises some concerns for achieving compliance.
Read more…