PCI DSS 4.0 is Here – What You Need to Do to Stay Compliant

If your business takes card payments, chances are you’re familiar with PCI DSS. But if you’re handling compliance processes by yourself, you may not be aware of recent updates, and what it means for your business. Here, Evolve takes you through what’s new in PCI DSS, and how we can help you navigate an easy path to compliance.

PCI compliance refers to the Payment Card Industry Data Security Standard (PCI DSS), which applies to any company that takes card payments. It’s a set of security standards designed to ensure all companies that accept, process, store, or transmit card information securely and protect cardholder information from theft, hacking, data breaches and other security threats.

Failing to comply with PCI standards can result in hefty fines, damage to reputation, and even legal consequences. Whether you’re a large corporation or a small business, it’s important to take PCI compliance seriously.

So, what do you need to do to become – and stay – compliant?

PCI DSS is applied to organisations based on the number and type of card transactions they make each year.

PCI DSS Level 1 ensures the highest level of security for businesses that store, transmit, or process credit card data. A Level 1 merchant is defined as processing at least 1 million JCB card transactions, 2.5 million American Express transactions, or 6 million Visa, Mastercard and Discover transactions per year.

Following an on-site audit, PCI Level 1 merchants and service providers must obtain an annual Compliance Report from a Qualified Security Assessor (QSA) or Internal Security Assessor (ISA) to comply with PCI DSS.

But merchants have an extra layer of responsibility when it comes to PCI compliance; they are responsible for ensuring their cards, payments, and internet service providers (ISPs) are compliant to ensure the security of their cardholder environments against data breaches.

The latest PCI DSS version 4.0 became mandatory on 1 April 2024. The previous version, PCI DSS 3.2.1. was retired on 31 March 2024, so all card-accepting organisations need to be compliant with PCI DSS 4.0 from now on.

Version 4.0 has been launched to account for the massive changes in technology, cybersecurity and the way payments are made over the past few years. You only need to look at how COVID-19 accelerated the shift to contactless payments and how e-commerce changed the way people pay. Around the world, millions of brick-and-mortar or cash-only businesses had to go online and accept cards virtually overnight.

Changes that are mandatory as of 1 April 2024 include:
· Companies must define and document the scope of their cardholder data environment annually and after any significant changes are made.
· Any files companies use to create their network infrastructure must be secured.
· Companies must have documented requirements that are shared between their organisation and any third-party service providers they have relationships with.
But 51 new requirements will be mandatory from April 1 2025. Here, we’ve identified the ones likely to require more work or significant changes to your card acceptance infrastructure.
· It will no longer be acceptable to use disk or partition level encryption for any encrypted data that companies store.
· Stored hashes of PANs will need to be cryptographically keyed hashes, and companies will be required to produce an inventory of all the cryptography used to protect cardholder data. Companies will also be required to perform an annual risk assessment of all their uses of cryptography.
· Any JavaScript in web payment pages must be actively managed and must respond to any unauthorised changes.
· Companies will be required to use technology designed to detect and prevent phishing attacks.
· Multifactor authentication will be required for all users who can access the cardholder data environment, not just those who have remote or administrative access.
· Companies must maintain an inventory of hardware and software, but from 1 April 2025, they must also conduct risk assessments of any assets approaching their end-of-life and replace them where appropriate.

Let Evolve manage your PCI DSS 4.0 compliance

Traditionally, ensuring PCI compliance is the responsibility of the business. Companies must undergo frequent internal and external security assessments by authorised independent audit institutions to obtain PCI DSS Level 1 certification, including detailed on-site audits every year.

Achieving and maintaining PCI DSS compliance can involve enormous operational and technical investments, especially for businesses that don’t have payment infrastructures as part of their core operations. For a business operating in multiple sites, like Fuel Forecourts or Retailers, it can be a logistical nightmare to assess every POS terminal or gateway and the processes that accept card payments.

With so many reports, audits and administrative burdens to handle, many companies will be concerned about the amount of money and time it will take to ensure compliance. But there is an easier, cheaper and more efficient way to get PCI-compliant – letting Evolve do the work for you.

Founded in 2005 and serving more than 9,500 sites globally in the Retail, Hospitality and Fuel Forecourt industries, Evolve is a fully Managed Service Provider (MSP) operating in 12 countries, offering customers reliable, secure and Level 1-certified PCI DSS SD-WAN solutions. SD-WAN stands for Software-Defined Wide Area Network, a type of networking technology that enables businesses to manage the connections between their different locations, such as offices, data centres, and remote workers.

The only PCI DSS Level 1-certified PCI-compliant SD Wan device in the world is Mako’s SD Wan device. As a Mako platinum partner, Evolve provides customised SD-WAN solutions with PCI Level 1 certification for payment security. By combining Mako’s devices with Evolve’s friendly, knowledgeable and multilingual 24/7 support team, you can be assured that your call will always be answered by someone within two minutes.

Also, instead of slogging through the 240-question assessment document, for every location, IP address and terminal to get PCI-certified, Evolve will answer them for you. Of those 240 questions, 210 of them – or 90% – are answered by Evolve’s PCI compliance capabilities, so its customers don’t have to worry about them. The team can also guide you on the journey to achieving complete PCI audit compliance – something no other provider can offer.

With the combination of Evolve and Mako, and its annually assessed attestation of compliance, businesses gain an unbeatable PCI compliance suite that no other provider has. That’s hugely important because, as evidenced by PCI DSS 4.0 above, criteria and requirements can frequently change.

Contact Evolve to find out more about how the team can help you manage your PCI DSS compliance requirements. You can also check out this case study on how Hydes Brewery achieved effortless PCI DSS compliance thanks to Evolve.

End

About Evolve Business Group and Evolve

Evolve Business Group is an independently owned company that specialises in providing end-to-end IT and managed network solutions to a range of businesses. Evolve is helping businesses to reduce costs and simplify the management of services and give business owners and their teams more time to do what they do best.

Founded in 2005, it has worked with a variety of customers across different industries around the world, building a team of highly experienced specialists to help create effective and efficient packages using any combination of different offerings. It keeps a range of cross-sector networks protected and connected.

@evolvebg

Visit Evolve's LinkedIn

More News

Celebrating Women in Tech: Breaking Barriers and Shaping the Future

On International Women’s Day, we take a moment to celebrate the achievements of women in technology, particularly in Managed Networks—a field that plays a critical role in keeping businesses connected and thriving. While technology has long been a male-dominated industry, we are seeing more women stepping into the space, bringing fresh perspectives, diverse skills, and innovation. Their contributions are shaping the future of tech, and their stories inspire the next generation of women looking to pursue careers in this field. Breaking Into the Industry Women in tech come from various backgrounds, each with a unique journey that led them into the industry. For some, the passion for technology was ignited early on by family influences or personal experiences, while others discovered it unexpectedly and found themselves captivated by its fast-paced and ever-evolving nature. “I grew up around tech thanks to my dad, a tech enthusiast who believed in its future. He encouraged me and my sisters to pursue our passions, leading my younger sister to become a BT engineer and me to enter the tech industry,” shares Michelle Horan, Finance Director. “The constant innovation in tech excites me, and I love being part of an industry shaping the future. My dad would be proud.” Others, like Constance Smith, Head of Marketing, found their way into technology by chance but stayed because of the industry’s significant impact. “In all honesty, I kind of fell into a career in the technology sector, but I stayed because it’s an industry that shapes the future. It’s long-lasting, impactful, and constantly evolving. But historically, we haven’t always seen as many women represented in this space.” Advice for Women Entering Tech For women considering a career in tech, the advice from those already in the field is clear—believe in yourself, embrace challenges, and find supportive communities. “For women entering tech, I advise gaining experience in other industries to broaden your perspective,” says Michelle. “Be your biggest cheerleader, take on challenges, and surround yourself with inspiring people. Embrace your unique qualities—they are your superpower. Believe in yourself, and don’t be afraid to embrace the unknown.” Constance adds, “Technology thrives on diverse perspectives, and there’s room for everyone to contribute and make a difference. The more we show up, support each other, and share our ideas, the more inclusive and innovative the industry becomes for future generations.” The Most Rewarding Part of Working in Tech One of the most fulfilling aspects of working in the tech industry is seeing the direct impact technology has on businesses and individuals. Whether it’s providing connectivity solutions, streamlining operations, or driving innovation, the work done in Managed Networks is powerful and transformative. “The most fulfilling aspect of working in the tech industry, particularly in Managed Networks, is witnessing the tangible impact we have on businesses,” says Georgia English-Mather, Marketing Executive. “It’s incredibly rewarding to know that the connectivity infrastructure and tools we provide play a crucial role in helping companies not only operate smoothly but also thrive and grow in an increasingly digital world. What we do is incredibly powerful—we keep businesses connected, running efficiently, and ready for the future.” Beyond the technical impact, the people and culture within the industry are equally rewarding. “The most rewarding aspect of working in tech is witnessing its tangible impact on people’s lives,” shares Caroline Oxley, Head of People & Talent. “The industry is dynamic and ever-evolving, offering constant opportunities to learn and adapt to new challenges. Collaboration with diverse, talented teams is particularly enriching, especially in HR.” The Evolving Role of Women in Tech The representation of women in technology is steadily increasing, with more women stepping into leadership roles and contributing to groundbreaking advancements. While challenges such as unconscious bias and gender gaps still exist, progress is being made, and successful women in tech continue to pave the way for future generations. “The role of women in tech is evolving positively, with increasing representation and leadership roles,” says Caroline. “More women are pursuing STEM education, which is essential for future innovation. While challenges remain, progress is ongoing, and successful women in tech inspire future generations, showing young women they can excel in the industry.” Laura Drury, Service Desk Manager, adds, “It’s an incredibly exciting and fulfilling time to be working at Evolve in the tech industry, where opportunities for innovation and automation are constant. Each day brings something new, constantly challenging me to grow both personally and professionally, which I truly enjoy. The tech sector once had a significant gap in women’s representation, but this is changing rapidly. I’ve never once felt out of place as a woman in this industry, which speaks volumes about the company I work for. More and more women are stepping into leadership roles and thriving, proving that anything is possible regardless of gender. They’re not only bridging the skills gap but also driving continuous improvement. In today’s world, diversity and inclusion are more important than ever.” Looking Forward On this International Women’s Day, we celebrate the incredible women who are shaping the future of technology. Their resilience, creativity, and passion for innovation are not only driving the industry forward but also inspiring the next wave of women to step into tech with confidence. As we continue to push for greater inclusivity and diversity, one thing is clear—technology thrives when different voices come together to innovate and create. To all the women in tech, whether you’re just starting your journey or are already making an impact, your contributions matter, and your presence is shaping the future of the industry.

Person paying with their phone on a card machine

The Future of Retail Payments: How Secure Networks Enhance Customer Experience

As retail technology evolves, businesses must ensure their payment infrastructure keeps pace with consumer expectations. A seamless, secure, and high-performing network is essential for smooth transactions, data protection, and omnichannel experiences. Managed Network Solutions, such as those offered by Evolve, play a crucial role in maintaining the security, speed, and scalability of retail payment systems. The Importance of Secure Networks in Retail Payments Retailers handle vast amounts of sensitive financial data, making them prime targets for cyber threats. A secure network infrastructure protects payment information from breaches and fraud, safeguarding both businesses and customers. PCI DSS-compliant environments, encryption, and authentication measures significantly reduce security risks and enhance consumer confidence. Enhancing Payment Speed and Reliability Customers expect fast transactions, whether in-store or online. Slow or failed payments cause frustration and lost sales. A robust network, reinforced by high-performance data centres, minimises latency and ensures real-time processing. Managed network solutions optimise connectivity across locations, delivering a consistent checkout experience. Supporting Omnichannel Payment Experiences Retailers must support various payment methods, from traditional cards to digital wallets and Buy Now, Pay Later (BNPL) options. A resilient network enables seamless omnichannel payment experiences, allowing customers to transition effortlessly between online, mobile, and in-store purchases. Preventing Downtime with 24/7 Network Support Even brief payment processing outages can impact revenue and customer trust. Proactive, round-the-clock network monitoring helps retailers prevent downtime and resolve issues quickly. Evolve’s managed solutions include real-time diagnostics, automated failover, and expert support to ensure uninterrupted payment operations. Future-Proofing Payment Infrastructure As retail evolves, businesses must future-proof payment infrastructure with scalable and adaptive network solutions. AI-driven fraud detection, automated network management, and cloud-based payment platforms keep retailers ahead of consumer trends and security threats. A secure, optimised network is essential for seamless, reliable retail payment experiences. By prioritising security, speed, omnichannel support, and 24/7 reliability, retailers can enhance the customer journey. With Evolve’s expertise in Managed Network Solutions, businesses can confidently build a payment infrastructure that meets modern retail demands.

Sam Bradshaw: My Post- Apprenticeship Life

Click here to download At Evolve, we pride ourselves on cultivating a company culture where people are our greatest asset. That’s why we recently renewed our commitment to nurturing new talent by exceeding our 5% Club pledge, with 9.24% of Evolve’s employees enrolled in apprenticeship programmes in 2024. To look back at his journey and what his apprenticeship did for him, we sat down with Sam Bradshaw, IT Second Line Support Manager, to tell us about his experience with us. How I came to Evolve… Since childhood, I have been fascinated by the rapid development of computer technology and its impact on people’s lives. I have actively followed its progression and enjoyed solving technical issues for my family at home. This passion led me to pursue an A Level in IT alongside Sociology and History in high school, further deepening my understanding of technology and its broader societal effects. After following the traditional path through high school and A Levels, I realised I was ready to move beyond the classroom and apply my skills in a real-world setting. Although I received an unconditional offer for a place at the University of Nottingham, I recognised that an apprenticeship would give me the best of both worlds, combining the aspects of learning I enjoyed with the practical experience I wanted. After I finished college, I looked online and took my time to find an apprenticeship that was right for me. The apprenticeship at Evolve was a trainer-led course, which was a big draw for me. It meant that each module I would spend a week on a training course (roughly every 6-8 weeks), which involved spending 6-8 hours a day from Monday to Thursday on-site and learning the skills, and then taking an exam on the Friday. This format was the most helpful for me as a learner, and it meant that I got the most out of my apprenticeship. Apprentice life… Back when I was an apprentice, my hours were usually 8am-5pm, with an hour or so a day to do coursework, and of course the occasional week at a training course. A typical day would involve me working with more senior people to learn the technical elements of the job while also gathering information and evidence for my apprenticeship coursework to prove that I was learning all the relevant skills. I always felt that I had the time, space and support I needed at Evolve to meet the targets of my apprenticeship. In terms of what I learnt from my apprenticeship, the top thing would be the technical IT skills. The soft skills I learnt, such as effective communication and personal confidence, were invaluable – they’re not something you learn at school, and I will always be grateful that I learnt so many of these in my apprenticeship to prepare me for the workforce. I was one of the first-ever apprentices at Evolve, and we have since had numerous other apprentices coming through the business, which has been a big benefit to us all. I completed my Level 3 IT Apprenticeship within 18 months and went straight on to complete my Level 4 IT Apprenticeship within 18 months as well. This meant that in just 3 years I was completely qualified to take on a full-time role in IT, and this was a big accomplishment for me. It also led to me being offered the full-time role at Evolve, and I’m still here today! Life after apprenticeship… As an IT Second Line Support Manager, my role nowadays combines technical and team management skills – I manage six people in my team as well as respond to technical issues. IT is an accelerated industry. The way we use IT and the technologies that it uses (like AI) are changing all the time, so the way we support it as IT engineers changes all the time too. This rapid change is really exciting and keeps us on our toes, and it’s what I love most about the job I do. A highlight for me since starting my career with Evolve was when one of our largest customers came to us with a requirement for delivering over 1000 devices, including tablets, laptops and phones. This involved setting them up and then going to sites across the country so that our engineers could ensure they were delivered and installed correctly. It was a very rewarding project as we got really positive feedback from the customer that everything had been delivered extremely well without it impacting any normal service levels. In the next five years, I hope to progress in my current career route and stay in roles that involve both technical and management skills. I’m certain that my apprenticeship helped my long-term career goals in a way that I couldn’t have done at university. I have the practical, technical and communication skills that are enabling me to progress much quicker in my career, and an added bonus is not having to pay university fees!

Tyler Lowe: My Experience as an Evolve Apprentice

Click here to download At Evolve, we pride ourselves on cultivating a company culture where people are our greatest asset. That’s why we recently renewed our commitment to nurturing new talent by exceeding our 5% Club pledge, with 9.24% of Evolve’s employees enrolled in apprenticeship programmes in 2024. To shine a light on what an apprenticeship at Evolve looks like, we sat down with Tyler Lowe, Apprentice First Line Engineer, to tell us about his experience with us. How I came to Evolve… I’ve always had a logical and creative mind, and in fact, when I was younger, I wanted to get into the game industry. This led me to the University of Bradford, where I studied game design and development. After leaving university, I looked into various ways of getting into the industry and hoped to get a role as a Junior Game Developer or Junior Software Developer. Unfortunately for me, a lot of the big game companies at the time were laying off their staff and not taking on new people, so I quickly realised there was no opportunity for me to progress in that career path. At this point I took a step back and re-evaluated what my options were. I looked at what aspects of my university course I enjoyed and was best at and decided to look for an alternative career option that would enable me to use my problem-solving and technology skills while also having a clear path of progression. This led me to Baltic Apprenticeships, the largest independent training provider in England, who work with Evolve to offer a range of apprenticeships. I got in touch and told them that I was interested in a role that covered both IT support and programming elements, and they directed me to Evolve. Apprentice life… As an Apprentice First Line Engineer, my job is basically to deal with the initial IT problem presented by the customer, ask questions and decide what the best course of action is to get the problem solved as quickly as possible. A typical day for me means coming into the office, sitting with my team of engineers, and learning from them based on the work that they do. I often watch my manager deal with an incoming IT ticket and then go away to practice that type of ticket by myself to ensure I’ve learnt it properly. My apprenticeship will last for around a year in total and started with two weeks of shadowing a colleague, learning the work they do and the IT tickets they get. I asked a lot of questions and eventually moved on to individual tasks where I used my own initiative and built my confidence – with proper management oversight, of course! As the weeks went on, the scheme gradually progressed to enable me to take on more tasks as I grew in confidence and knowledge. The biggest challenge for me has been that everything in the role is new – but that also makes it fun and exciting. I’ve even had the chance to experience some really interesting projects and visit some cool places: we had a one-off project for a longterm customer that involved me going to America with the network team to stage, build and package a new network of over 300 items. This was one of the highlights of my apprenticeship so far, and I really learned in detail how the network team works and how it complements the IT team that I work in. What I’ve learned… During my first couple of weeks at Evolve, I was very nervous to answer any of the many calls we get as first line IT engineers. My team supported me to slowly take on one or two calls to learn the ropes and help build my confidence, initially passing callers on to relevant team members and eventually being able to deal with the problem on the phone myself. Not long after this, I was recognised as the person with the greatest number of calls answered at Evolve, which was huge progress for me. Overall, my apprenticeship at Evolve has helped me to develop the skills and confidence I need to set me on a positive path for the future. In a relatively short space of time, I have become one of the most knowledgeable people in my area, and people now come straight to me with questions about it. It’s a great feeling to know how far I’ve come since my first day as an apprentice. I believe that my role is so enjoyable because I talk to real people every day and help them to solve a problem – Evolve is a people business, and that really shines through. It’s been an interesting experience for me, especially being 25 and older than many of the other apprentices, but it has taught me that you can come to an apprenticeship at any point in life, and it will always be an opportunity to learn new skills and get on a new career path. What the future holds… After university, I felt like I had been dropped with no real guidance on how to progress a career and secure a good role. Since being at Evolve, I’ve become confident that I have an abundance of choice in my future and that the next five years of my career will be great. My manager is a constant support for me in this, as she is always helping me to think ahead and understand what all my options are. The whole Evolve team has reassured me that I can explore what is best for me, ensure that I am on the right path, and that I will be supported to get there. If anyone reading this is interested in doing an apprenticeship in IT, or any other apprenticeship at Evolve, I would say go for it. It’s a lot easier to get started in an apprenticeship than you may think – you don’t need to have all the answers straight away; you are being taught