Payment Card Industry Data Security Standard for organisations processing, storing, or transmitting cardholder data.
Payment Card Industry Data Security Standard for organisations processing, storing, or transmitting cardholder data. This framework is part of tier 1 - cyber & data, designed for SMEs starting their compliance journey.
Authoritative current reference
PCI DSS v4.0.1
Authority: PCI Security Standards Council (PCI SSC)
PCI DSS v4.0.1 is the only active PCI DSS version supported by PCI SSC after PCI DSS v4.0 was retired on 31 December 2024. The R2 catalogue label 'PCI DSS v4.0' is stale; retain R2 history and update naming/mapping only through a governed R3 release.
TAP assessment content remains pinned to its governed release. Current-source metadata does not silently change historical questions or represent certification against a newer external version.
Approximately 90 minutes to complete the full assessment
Complete comprehensive assessments with smart questioning that adapts to your responses.
Identify compliance gaps with severity ratings and prioritised remediation recommendations.
Securely store and organise compliance documentation with automated expiry tracking.
Access to TASK consultants for guidance, reviews, and remediation planning.
Generate professional PDF reports for stakeholders, auditors, and regulators.
Need enterprise deployment? Contact us
UK government-backed scheme covering five key security controls to protect against common cyber threats.
International standard for information security management systems (ISMS) with comprehensive risk-based controls.
UK General Data Protection Regulation — data protection and privacy requirements for organisations handling personal data.