thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

PCI DSS Customized Approach

PCI DSS v4 option allowing entities to meet a requirement's stated objective with controls they design, validated by an assessor.

Definition

Instead of the defined approach, mature entities can document a controls matrix and targeted risk analysis for each customized requirement and have the assessor derive testing procedures. It is not available for SAQ-based assessments. It is distinct from compensating controls, which address legitimate constraints.

Example

A fintech uses continuous authentication analytics to meet a requirement's objective rather than the defined control.

Exam tip

Customized approach needs a targeted risk analysis and is not allowed with SAQs.

Related terms