Key Considerations for PCI DSS v4.0.1 Requirements 4.2.1.1 and 12.3.3
With several new PCI DSS v4.0.1 requirements set to take effect on April 1, 2025, two requirements—4.2.1.1 and 12.3.3—have generated significant attention and questions. Let’s begin by reviewing the text of these requirements: The Relationship Between 4.2.1.1 and 12.3.3 Requirement 12.3.3 is a broad, comprehensive requirement encompassing all cryptographic use cases, including those covered under…