For organisations yet to update to PCI DSS 4.0, creating a schedule for achieving compliance should be the first step. Leaving compliance until the last few weeks before March 2025 simply isn’t an option.
Auditors began using the new version of the standard in April 2024 and will require all organisations to comply with 4.0 by March of 2025, so there really is no time to waste.
E-commerce businesses should aim to engage in continuous assessment of hardware and software, educate staff on the new requirements and utilise tools and services designed to make the compliance process easier.