The countdown to PCI DSS 4.0 compliance is on. By 31 March 2025, any organization that stores, processes or transmits cardholder data must align themselves with its exacting requirements. It sets a high bar for such organizations, which is only fitting considering what’s at stake, and the current risks posed by both external threat actors and enterprise IT complexity.