PCI-DSS Compliance Checklist

Complete implementation guide for PCI-DSS v4.0

Network Security Controls

Install and maintain network security controls (firewalls)

Configure firewall rules to restrict cardholder data environment (CDE)

Remove or change vendor-supplied defaults

Apply secure configurations to all system components

Maintain inventory of all systems in CDE

Document network diagrams showing CDE boundaries

Encrypt cardholder data at rest (AES-256)

Encrypt cardholder data in transit (TLS 1.2+)

Never store sensitive authentication data after authorization

Mask PAN when displayed (show only last 4 digits)

Implement key management procedures

Define and enforce data retention and disposal policies