Key Metrics for Tracking PCI DSS Compliance in 2026 | UpGuard

This document is a PCI DSS compliance checklist outlining the twelve core requirements (firewalls, secure configurations, key protection, encryption, anti-virus, secure development, access control, identity management, physical controls, auditing, vulnerability scanning and penetration testing, and security policy/training) and offering recommendations and metrics to help organizations meet PCI DSS 3.2.1 requirements and prepare for the upcoming PCI DSS 4.0 changes.