thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Payment Card Industry Data Security Standard (PCI DSS)

Industry standard with 12 requirements for protecting payment account data, maintained by the PCI Security Standards Council.

Definition

PCI DSS v4.0.1 (June 2024) is the current version; its future-dated requirements became mandatory on 31 March 2025. The 12 requirements fall under six goals: build and maintain secure networks, protect account data, maintain a vulnerability management program, implement strong access control, regularly monitor and test networks, and maintain an information security policy. Compliance is contractually enforced by card brands and acquirers, not by law.

Example

An online retailer reduces scope by using a hosted payment page and completes SAQ A.

Exam tip

PCI DSS is a contractual industry standard, not a government regulation.

Related terms