There are 51 new requirements introduced in PCI DSS 4.0, which come into effect in April 2025. Among the many significant updates designed to address 21st century cybersecurity issues, organisations will find that a greater emphasis has been placed on protecting customer interactions through greater browser security. This appears to be a direct response to the proliferation of online skimming and Magecart attacks in recent years.
Due to the raft of new requirements, it is necessary for e-commerce businesses to conduct a thorough review of their security protocols, tightening their approach to data handling and following more rigorous and robust security procedures for customers.
While it is easy to see these measures as box-ticking exercises, it is important to remember that by implementing effective security measures and reducing risk, online stores may significantly reduce the threat of a breach or card data leak.