PCI-DSS-v4_0 支付卡行业数据安全标准4.0.pdfVIP

Payment Card Industry Data Security Standard Requirements and Testing Procedures Version 4.0 March 2022 Document Changes Date Version Description October 2008 1.2 To introduce PCI DSS v1.2 as “PCI DSS Requirements and Security Assessment Procedures,” eliminating redundancy between documents, and making both general and specific changes from PCI DSS Security Audit Procedures v1.1. For complete information, see PCI Data Security Standard Summary of Changes from PCI DSS Version 1.1 to 1.2. July 2009 1.2.1 Add sentence that was incorrectly deleted between PCI DSS v1.1 and v1.2. Correct “then” to “than” in testing procedures 6.3.7.a and 6.3.7.b. Remove grayed-out marking for “in place” and “not in place” columns in testing procedure 6.5.b. For Compensating Controls Worksheet – Completed Example, correct wording at top of page to say, “Use this worksheet to define compensating controls for any requirement noted as “in place” via compensating controls.” October 2010 2.0 Update and implemented changes from v1.2.1. See PCI DSS – Summary of Changes from PCI DSS Version 1.2.1 to 2.0. November 2013 3.0 Update from v2.0. See PCI DSS – Summary of Changes from PCI DSS Version 2.0 to 3.0. April 2015 3.1 Update from PCI DSS v3.0. See PCI DSS – Summary of Changes from PCI DSS Version 3.0 to 3.1 for details of changes. April 2016