Payment Card Industry Data Security Standard (PCI DSS 4.0)

Authentic statutory obligations decomposed into atomic machine-actionable conditions, actions, and verification standards.

Official Legal Text

Criticalprohibition98% AI Match

Requirement 3: Protect Stored Account Data

Primary account numbers (PAN) must be rendered unreadable anywhere it is stored using strong cryptography (AES-256), hashing, or tokenization; never store sensitive authentication data (SAD) after authorization.

Required Actions & Enforcement

Statutory verification and compliance logging required.

Trigger Conditions (AST Logic)

{
  "no_cvv_storage_post_auth": true,
  "pan_tokenized_or_encrypted": true
}

Criticalobligation98% AI Match

Requirement 8: Identify Users and Authenticate Access to System Components

All access to system components must be identified and authenticated, requiring Multi-Factor Authentication (MFA) for all access to the Cardholder Data Environment (CDE).

Required Actions & Enforcement

Statutory verification and compliance logging required.

Trigger Conditions (AST Logic)

{
  "mfa_required_for_cde": true,
  "8_character_plus_passwords": true
}

Criticalobligation98% AI Match

Requirement 4: Protect Cardholder Data with Strong Cryptography in Transit

Strong cryptography and security protocols must be used to protect sensitive cardholder data during transmission over open, public networks.

Required Actions & Enforcement

Statutory verification and compliance logging required.

Trigger Conditions (AST Logic)

{
  "tls_1_2_or_1_3_only": true,
  "valid_pki_certificates": true
}

Criticalobligation98% AI Match

Requirement 10: Log and Monitor All Access to System Components and Cardholder Data

Audit trails must be enabled and active for all system components, linking all access to individual users, and reviewed at least daily.

Required Actions & Enforcement

Statutory verification and compliance logging required.

Trigger Conditions (AST Logic)

{
  "daily_log_review": true,
  "12_month_log_retention": true
}

Criticalobligation98% AI Match

Requirement 1: Install and Maintain Network Security Controls

Network security controls (NSCs) such as firewalls and cloud security groups must be configured to inspect and control traffic between trusted and untrusted networks.

Required Actions & Enforcement

Statutory verification and compliance logging required.

Trigger Conditions (AST Logic)

{
  "cde_isolated": true,
  "default_deny_all_ingress": true
}