24th PCI London

As long-time PCI London speaker and expert John Elliott has written, PCI DSS 4.0 can be regarded as a combination of evolution and revolution, with the possibility of extinction lurking somewhere in the future.

Put simply, advances in payment security and regulation mean that data stolen from a face-to-face transaction and from e-commerce transactions cannot be reused. Developments like EMV cards, 3D Secure version 2.2 and the use of devices to pay that use tokens not PANs mean that the areas of PCI DSS compliance that card brands mandate are shrinking fast. Changes to PAN truncation, which appear to make it easier for criminals to guess missing digits, indicate that the cards may not even regard the PAN as a significant payment instrument, which would potentially render the whole idea of PCI DSS redundant.

PCI London will look in detail at PCI DSS 4.0 and the changes it will require for compliance teams. And it will look at the future of the Standard. Join our real-life case studies and in-depth technical sessions from the security and privacy teams at some of the world’s most admired brands.