Since March 31, 2025, the new PCI DSS v4.0.1 has been in effect, prompting organizations in scope of the standard to ensure their compliance with updated requirements. As PCI DSS assessments demand long hours, heavy documentation work, and manual reporting that can take days to complete, many teams struggle to become audit-ready. With 6clicks, that workload becomes far easier to manage. Built-in content and functionality, along with AI-powered automation, help you move faster while improving accuracy and consistency. Learn what’s new in PCI DSS v4.0.1 and how 6clicks helps you meet the latest requirements with confidence.
Overview of changes in PCI DSS v4.0.1
As the global standard for protecting cardholder data, the Payment Card Industry Data Security Standard (PCI DSS) outlines requirements ranging from network security controls to information security policies for banks, merchants, service providers, and other organizations handling personal information and payment transactions. The latest PCI DSS version (v4.0.1) introduces amendments to several requirements, including:
- Requirement 3: Protect Stored Account Data
Strengthened clarification and guidance across storing sensitive authentication data (SAD) and protecting primary account number (PAN) data.
- Requirement 4: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks
Added establishing acceptable use policies for managing end-user technologies as good practice.
- Requirement 6: Develop and Maintain Secure Systems and Software
Additional clarification and guidance across performing vulnerability scanning, patching critical vulnerabilities, and maintaining an inventory of payment page scripts.
- Requirement 8: Identify Users and Authenticate Access to System Components
Updated guidelines on multi-factor authentication for in-scope system components, non-console administrative access, and all remote system access.
- Requirement 12: Support Information Security with Organizational Policies and Programs
Specified that written agreements serve as the acknowledgement of responsibility over customer account data security from third-party service providers (TPSPs).
How 6clicks supports the latest PCI DSS version
In line with these updates, 6clicks’ latest enhancements are designed to support organizations in their journey to achieving compliance with the new requirements of PCI DSS v4.0.1. These include:
- Preloaded content: From the Content Library, easily download ready-to-use PCI DSS content, including the new PCI DSS v4.0.1 framework, control sets, and a pre-configured assessment template.
- Simplified assessments: Launch assessments instantly using our custom-built PCI DSS v4.0.1 requirement-based assessment template straight out of the box, with custom fields and rules already preconfigured to meet the requirements of a PCI Report on Compliance (RoC).
- Enhanced customization: With our newly released assessment rules capability, you can create your own assessment template and configure it to show fields such as assessment findings, compensating controls, and customized approach only for specific PCI DSS requirements. This lets respondents see and fill in only relevant fields, removes redundant data for assessors, and speeds up both the assessment and review process.
- Audit-ready reports: With assessments already configured according to RoC requirements, users can generate their RoC (Report on Compliance) in just a few clicks and provide validation of PCI DSS readiness in seconds instead of days.
Beyond turnkey templates and content, streamlined assessments, and instant report generation, 6clicks also empowers organizations with AI-powered efficiency to help them automate traditionally manual tasks such as:
-
Populating control details and linking controls to authority documents
-
Mapping controls to individual requirements and identifying compliance gaps
-
Creating remediation tasks or treatment plans for assessment findings
What are the benefits for compliance and audit teams?
From assessment to reporting and remediation, 6clicks equips you with complete capabilities to manage compliance more effectively. This benefits teams in several different ways:
- Faster implementation: Accelerate rollout with the PCI DSS v4.0.1 framework and assessment template ready to go.
- Reduced manual work: Eliminate repetitive tasks with automation and predefined configurations.
- Tailored workflows: Build assessments with flexibility and control using templates, custom fields, and assessment rules.
- On-demand insights: Easily validate your compliance posture and streamline audit preparation with automated reports.
- Proactive response: Launch remediation actions instantly and address compliance gaps promptly with automated task creation.
Overall, 6clicks reduces the complexity of compliance and helps organizations stay ahead of evolving requirements.
Move to PCI DSS v4.0.1 with confidence
Work smarter, simplify your compliance processes, and achieve audit readiness faster with 6clicks.
