Skip to main content

Whitepaper
Mid-Year PCI DSS Briefing

Overview

The first half of 2025 marked a turning point for PCI compliance. As PCI DSS v4.0.1 became enforceable on March 31, organizations faced 51 newly required controls ushering in major changes to vulnerability scanning, change detection, and access management. Meanwhile, data breaches at companies like Hertz, Grubhub, and ZAGG revealed persistent risks tied to third-party vendors. This whitepaper breaks down the most impactful changes, breach insights, and new PCI guidance to help compliance teams prepare for the second half of the year.

What You Get:

This whitepaper highlights:

  • Timeline and enforcement update for PCI DSS v4.0.1.
  • In-depth breach analysis and root cause insights.
  • Summaries of PCI SSC’s newest FAQs and ROC changes.

Get Your Download Instantly by Email

Meet the Author

Andrew-Parks-headshot-circle-2026-1

Andrew Parks

Manager, Advisory and Assurance

Andrew Parks is a Manager on the Advisory and Assurance team at risk3sixty, specializing in Payment Card Industry (PCI) and CMMC compliance. He has served as a PCI Qualified Security Assessor (QSA) for more than five years and previously held the role of PCI Internal Security Assessor (ISA), bringing his total PCI experience to over a decade.

More recently, Andrew has obtained the CMMC certification of Registered Practitioner (RP).Andrew leverages a strong technical background in his work as both a PCI QSA and CMMC advisor. He holds certifications in cloud technologies and Kubernetes (KCNA), enabling him to effectively support clients operating in complex technical environments to achieve and maintain compliance.

Raving Fans

Positive Business Outcomes

Platformsh_logo_black-1024x360

See how Platform.sh saved 75% by harmonizing SOC 2, PCI DSS, and HIPAA.

joey-stanford

Joey Stanford
VP of Security & Privacy
See Case Study

Salesloft-Logo-copy

Salesloft obtained certification across SOC 2 and ISO 27001 in one harmonized workstream.


mike-meyer-500x500-2

Mike Meyer
SVP of Security
See Case Study

Fullstory

Fullstory harmonized 10 frameworks and becomes ISO 42001 early adopter


Fullstory-Anne-Turner-headshot

Anne Turner
Director of GRC
See Case Study

Why Choose Use

expert-team-icon-2-e1737039367594

Expert Team

Full team of certified industry experts​.
Software-Icon-blue

fullCircle GRC Platform​

Centralized command center to unify multiple frameworks.

quick-turnaround-icon

Award-Winning

Consulting Magazine Best Firms to Work For.

success-icon-blue

Proven Success​

Experience from over 1,000 engagements.

security-audit-team
security-implementation-team

Schedule your meeting with an expert today.