PCI DSS 4.0: Evolution, Revolution, or an Omen of Extinction?
summary
Examines PCI DSS version 4.0, evaluating whether the standard remains technically relevant or outdated for protecting cardholder data (16‑digit account numbers). Discusses the balance between prescriptive requirements and objectives-based controls, and considers PCI DSS’s applicability to cloud environments.
AI-written summary · about
chapters (12)
- 0:00Intro
- 5:58PCI DSS History
- 9:34Evolution of PCI DSS
- 14:02Revolution
- 16:14Customized Approach
- 19:58Extinction
- 22:25Payment Card Numbers
- 26:57Card Brand Rules
- 29:22Why Does PCI DSS Exist
- 32:21The Changing Attack Surface
- 38:07Conclusion
- 41:24What should you do
related talks
28mKeeping the Bank Happy: PCI DSS v4
47mBreakout Session
31mReverse Engineering Compliance
33mPKI PKI and PQC Strategy for Payment Card Industry
06mLightning Talk: PCI DSS and
41mPerspectives on the transition to PQC in the financial sector
42mSecurity, Fraud, and Compliance Panel
05mAchieving PCI Compliance On a Single Foundation