PCI-DSS (Payment Card Industry Data Security Standard)

Payment Card Industry Data Security Standard is the security requirement set for entities that store, process, or transmit cardholder data. The current version is PCI DSS v4.0.1, published in June 2024; v4.0 was retired on December 31, 2024. It has 12 high-level requirements covering network security, vulnerability management, access control, monitoring, and security policy. Code-relevant requirements concentrate in Requirement 6 (Develop and Maintain Secure Systems and Software).