PCI DSS 4.0: Get Audit-Ready for the New Requirements

This blog outlines key changes in PCI DSS 4.0—including its risk-based, flexible approach, emphasis on continuous monitoring, authenticated internal vulnerability scans, automated audit log reviews, and stronger password/MFA requirements—along with effective dates for new controls. It maps these requirements to Qualys Enterprise TruRisk Platform capabilities (e.g., VMDR, Policy Compliance, FIM, Patch Management, CAR, CSAM, WAS, TotalCloud, EDR) to help organizations assess, prioritize, and evidence compliance across on-premises and cloud cardholder data environments.