---
title: PCI v4.0 - Requirement 7:  All Things Accounts and Access Reviews
description: The Council has now added Application and System Accounts into the mix, as well as added more requirements to manage them.
image: https://info.obsglobal.com/hubfs/All%20things%20accounts%20and%20access%20reviews.png
---

[![Online Business Systems](https://info.obsglobal.com/hubfs/OBS%20+%20CGI%20LOGO%203.png)](https://www.obsglobal.com)

Toggle navigation

About

![](https://info.obsglobal.com/hubfs/About-Our_Approach.png)

###### Our Company

![](https://info.obsglobal.com/hubfs/Our-Community-Icon.png)

###### Our Community

![](https://info.obsglobal.com/hubfs/Executive-Team-Icon.png)

###### Executive team

![](https://info.obsglobal.com/hubfs/About-Partners.png)

###### Partners & Clients

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-News.png)

###### News

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-Events.png)

###### Events

Services

### [DIGITAL TRANSFORMATION](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

![Digital Advisory Services](https://info.obsglobal.com/hubfs/dig-trans-cons-1.png)

##### [Digital Advisory Services](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

[Assessment,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#assessment) [Strategy & Roadmap,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap) <https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap>[Enterprise Performance Management,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management) [Change Management](https://www.obsglobal.com/digital-transformation/change-management)

![Digital Studio Products](https://info.obsglobal.com/hubfs/dig-prod-dev.png)

##### [Digital Studio](https://www.obsglobal.com/digital-transformation/digital-studio)

[Custom Software Development,](https://www.obsglobal.com/digital-transformation/digital-studio/custom-software-development/) [Product Vision,](https://www.obsglobal.com/digital-transformation/digital-studio/product-vision) [Product Delivery,](https://www.obsglobal.com/digital-transformation/digital-studio/digital-product-delivery/) [Product Operations](https://www.obsglobal.com/digital-transformation/digital-studio)

![Salesforce](https://info.obsglobal.com/hubfs/salesforce-1.png)

##### [Salesforce](https://www.obsglobal.com/digital-transformation/salesforce)

[Sales Cloud,](https://www.obsglobal.com/digital-transformation/salesforce/#sales_cloud) [Marketing Cloud,](https://www.obsglobal.com/salesforce-marketing-cloud/) [Service Cloud,](https://www.obsglobal.com/digital-transformation/salesforce) <https://www.obsglobal.com/digital-transformation/salesforce/#lightening_enablement>[Agentforce,](https://www.obsglobal.com/digital-transformation/salesforce/salesforce-agentforce/) [Salesforce Consulting](https://www.obsglobal.com/salesforce-consulting)<https://www.obsglobal.com/digital-transformation/salesforce/#mulesoft_integration>

![Service Management](https://info.obsglobal.com/hubfs/2020-02-26-16_37_21-Clipboard.png)

##### [Service Management](https://www.obsglobal.com/digital-transformation/service-management)

[IT Service Management,](https://www.obsglobal.com/digital-transformation/service-management#it_service_management) [Enterprise Service Management](https://www.obsglobal.com/digital-transformation/service-management/enterprise-sm)

![Customer Engagement](https://info.obsglobal.com/hubfs/dig-adv.png)

##### [Customer Engagement](https://www.obsglobal.com/digital-transformation/customer-engagement)

[Contact Center Consulting,](https://www.obsglobal.com/digital-transformation/customer-engagement/contact-center-consulting) [Five9,](https://www.obsglobal.com/partners-and-clients/five9/) [Contact Center as a Service (CCaaS),](https://www.obsglobal.com/contact-center-as-a-service-ccaas/) [Conversational AI](https://www.obsglobal.com/digital-transformation/customer-engagement/conversational-ai)

![Business and Technical Consulting](https://info.obsglobal.com/hubfs/2020-02-26-16_37_40-Clipboard.png)

##### [Business and Technical Consulting](https://www.obsglobal.com/digital-transformation/business-and-technical-consulting)

[Project Management,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Quality Assurance  Development & AMS,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Systems Integration,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Cloud Deployment,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Infrastructure Managed Services](https://www.obsglobal.com/digital-transformation/business-technical-consulting/infrastructure-managed-services/)

![Data Services](https://info.obsglobal.com/hubfs/DataServices-icon.png)

##### [Data Services](https://www.obsglobal.com/digital-transformation/data-services/)

[Data Engineering & Architecture,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Management & Governance,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Analytics & Reporting](https://www.obsglobal.com/digital-transformation/data-services/)

![ai-sparkle](https://info.obsglobal.com/hubfs/ai-sparkle.png)

##### [Artificial Intelligence](https://www.obsglobal.com)

[GenAI](https://www.obsglobal.com/gen-ai), [GenAI Workshops,](https://info.obsglobal.com/gen-ai-workshop-registration) [Document Intelligence](https://www.obsglobal.com/innovation-lab/document-intelligence)<https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management>

### [CYBERSECURITY](https://www.obsglobal.com/cybersecurity)

![2020-02-26-16_38_37-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_37-Clipboard.png)

##### [Security Advisory Services](https://www.obsglobal.com/cybersecurity/security-advisory-services)

[CISO Services](https://www.obsglobal.com/cybersecurity/security-advisory-services/vciso/) [Security Program Management](http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/)                                            [Digital Forensics & Incident Response (DFIR)](https://info.obsglobal.com/digital-forensics-incident-response)<http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/>

![2020-02-26-16_38_23-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_23-Clipboard.png)

##### [Assessment Services](https://www.obsglobal.com/cybersecurity/assessment-services)

[PCI Compliance and Assessment](https://www.obsglobal.com/compliance-assessment-pci) Third-Party Risk Assurance [Risk & Privacy Readiness Assessment and Remediation](https://www.obsglobal.com/cybersecurity/assessment-services) Compliance and Assessments: ISO, NIST, SOC, GDPR

![2020-02-26-16_38_09-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_09-Clipboard.png)

##### [Offensive Security Services](https://www.obsglobal.com/cybersecurity/offensive-security-services)

[Penetration Testing – Network](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Wireless](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Web & App](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Red Teaming](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Social Engineering](https://www.obsglobal.com/cybersecurity/offensive-security-services#social_engineering) [Secure Code Analysis & Review](https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review) [Vulnerability Assessment](https://www.obsglobal.com/cybersecurity/offensive-security-services/vulnerability-assessment/) [Autonomous & Continuous Testing](https://info.obsglobal.com/autonomous-continuous-testing)<https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review>

![RSP Health-Color Thin](https://info.obsglobal.com/hubfs/RSP%20Health-Color%20Thin.png)

##### [Healthcare Cybersecurity](https://www.obsglobal.com/cybersecurity/rsp-health/)

[Risk Management Program](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HITRUST Readiness](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HIPAA Compliance](https://www.obsglobal.com/cybersecurity/health-cybersecurity/)<https://www.obsglobal.com/cybersecurity/rsp-health/>

![CloudSecurity_icon_WP-jm](https://info.obsglobal.com/hubfs/CloudSecurity_icon_WP-jm.png)

##### [Cloud Security Services](https://www.obsglobal.com/cybersecurity/cloud-security-services/)

[Cloud Security Advisory](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Engineering](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Assessment (FedRAMP/StateRAMP)](https://www.obsglobal.com/cybersecurity/cloud-security-services)

Innovation

![](https://info.obsglobal.com/hubfs/Bulb_Brain.png)

###### Innovation Lab

Careers

![](https://info.obsglobal.com/hubfs/Careers-Available_Positions.png)

###### CURRENT OPENINGS

![](https://info.obsglobal.com/hubfs/Careers_Working_At-Online.png)

###### OUR CULTURE

![](https://info.obsglobal.com/hubfs/Our-Benefits1.png)

###### OUR BENEFITS

![](https://info.obsglobal.com/hubfs/Address.png)

###### CULTURE CREDO

Insights

![](https://info.obsglobal.com/hubfs/BLOGS-icon-5ed95c0032155.png)

###### Blog

![](https://info.obsglobal.com/hubfs/CX%20Solutions%20Icon.png)

###### Customer Experience

![](https://info.obsglobal.com/hubfs/Agile%20Transformation%20Mega%20Menu%20Icon.png)

###### Agile Transformation

![](https://info.obsglobal.com/hubfs/b2b%20ecommerce%20icon.png)

###### B2B eCommerce

![](https://info.obsglobal.com/hubfs/Financial-Services-Icon.png)

###### Financial Services

Contact

![](https://info.obsglobal.com/hubfs/ContactUs_Contact-Us-Form.png)

###### Contact Us

![](https://info.obsglobal.com/hubfs/ContactUs-Locations.png)

###### Locations

About

![](https://info.obsglobal.com/hubfs/About-Our_Approach.png)

###### Our Company

![](https://info.obsglobal.com/hubfs/Our-Community-Icon.png)

###### Our Community

![](https://info.obsglobal.com/hubfs/Executive-Team-Icon.png)

###### Executive team

![](https://info.obsglobal.com/hubfs/About-Partners.png)

###### Partners & Clients

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-News.png)

###### News

![](https://info.obsglobal.com/hubfs/Imported%20sitepage%20images/About-Events.png)

###### Events

Services

### [DIGITAL TRANSFORMATION](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

![Digital Advisory Services](https://info.obsglobal.com/hubfs/dig-trans-cons-1.png)

##### [Digital Advisory Services](https://www.obsglobal.com/digital-transformation/digital-advisory-services)

[Assessment,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#assessment) [Strategy & Roadmap,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap) <https://www.obsglobal.com/digital-transformation/digital-advisory-services/strategy-roadmap>[Enterprise Performance Management,](https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management) [Change Management](https://www.obsglobal.com/digital-transformation/change-management)

![Digital Studio Products](https://info.obsglobal.com/hubfs/dig-prod-dev.png)

##### [Digital Studio](https://www.obsglobal.com/digital-transformation/digital-studio)

[Custom Software Development,](https://www.obsglobal.com/digital-transformation/digital-studio/custom-software-development/) [Product Vision,](https://www.obsglobal.com/digital-transformation/digital-studio/product-vision) [Product Delivery,](https://www.obsglobal.com/digital-transformation/digital-studio/digital-product-delivery/) [Product Operations](https://www.obsglobal.com/digital-transformation/digital-studio)

![Salesforce](https://info.obsglobal.com/hubfs/salesforce-1.png)

##### [Salesforce](https://www.obsglobal.com/digital-transformation/salesforce)

[Sales Cloud,](https://www.obsglobal.com/digital-transformation/salesforce/#sales_cloud) [Marketing Cloud,](https://www.obsglobal.com/salesforce-marketing-cloud/) [Service Cloud,](https://www.obsglobal.com/digital-transformation/salesforce) <https://www.obsglobal.com/digital-transformation/salesforce/#lightening_enablement>[Agentforce,](https://www.obsglobal.com/digital-transformation/salesforce/salesforce-agentforce/) [Salesforce Consulting](https://www.obsglobal.com/salesforce-consulting)<https://www.obsglobal.com/digital-transformation/salesforce/#mulesoft_integration>

![Service Management](https://info.obsglobal.com/hubfs/2020-02-26-16_37_21-Clipboard.png)

##### [Service Management](https://www.obsglobal.com/digital-transformation/service-management)

[IT Service Management,](https://www.obsglobal.com/digital-transformation/service-management#it_service_management) [Enterprise Service Management](https://www.obsglobal.com/digital-transformation/service-management/enterprise-sm)

![Customer Engagement](https://info.obsglobal.com/hubfs/dig-adv.png)

##### [Customer Engagement](https://www.obsglobal.com/digital-transformation/customer-engagement)

[Contact Center Consulting,](https://www.obsglobal.com/digital-transformation/customer-engagement/contact-center-consulting) [Five9,](https://www.obsglobal.com/partners-and-clients/five9/) [Contact Center as a Service (CCaaS),](https://www.obsglobal.com/contact-center-as-a-service-ccaas/) [Conversational AI](https://www.obsglobal.com/digital-transformation/customer-engagement/conversational-ai)

![Business and Technical Consulting](https://info.obsglobal.com/hubfs/2020-02-26-16_37_40-Clipboard.png)

##### [Business and Technical Consulting](https://www.obsglobal.com/digital-transformation/business-and-technical-consulting)

[Project Management,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Quality Assurance  Development & AMS,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Systems Integration,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Cloud Deployment,](https://www.obsglobal.com/digital-transformation/business-technical-consulting/) [Infrastructure Managed Services](https://www.obsglobal.com/digital-transformation/business-technical-consulting/infrastructure-managed-services/)

![Data Services](https://info.obsglobal.com/hubfs/DataServices-icon.png)

##### [Data Services](https://www.obsglobal.com/digital-transformation/data-services/)

[Data Engineering & Architecture,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Management & Governance,](https://www.obsglobal.com/digital-transformation/data-services/)[Data Analytics & Reporting](https://www.obsglobal.com/digital-transformation/data-services/)

![ai-sparkle](https://info.obsglobal.com/hubfs/ai-sparkle.png)

##### [Artificial Intelligence](https://www.obsglobal.com)

[GenAI](https://www.obsglobal.com/gen-ai), [GenAI Workshops,](https://info.obsglobal.com/gen-ai-workshop-registration) [Document Intelligence](https://www.obsglobal.com/innovation-lab/document-intelligence)<https://www.obsglobal.com/digital-transformation/digital-advisory-services/#enterprise_results_management>

### [CYBERSECURITY](https://www.obsglobal.com/cybersecurity)

![2020-02-26-16_38_37-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_37-Clipboard.png)

##### [Security Advisory Services](https://www.obsglobal.com/cybersecurity/security-advisory-services)

[CISO Services](https://www.obsglobal.com/cybersecurity/security-advisory-services/vciso/) [Security Program Management](http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/)                                            [Digital Forensics & Incident Response (DFIR)](https://info.obsglobal.com/digital-forensics-incident-response)<http://obsglobal.com/cybersecurity/security-advisory-services/security-program-management/>

![2020-02-26-16_38_23-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_23-Clipboard.png)

##### [Assessment Services](https://www.obsglobal.com/cybersecurity/assessment-services)

[PCI Compliance and Assessment](https://www.obsglobal.com/compliance-assessment-pci) Third-Party Risk Assurance [Risk & Privacy Readiness Assessment and Remediation](https://www.obsglobal.com/cybersecurity/assessment-services) Compliance and Assessments: ISO, NIST, SOC, GDPR

![2020-02-26-16_38_09-Clipboard](https://info.obsglobal.com/hubfs/2020-02-26-16_38_09-Clipboard.png)

##### [Offensive Security Services](https://www.obsglobal.com/cybersecurity/offensive-security-services)

[Penetration Testing – Network](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Wireless](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Web & App](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Red Teaming](https://www.obsglobal.com/cybersecurity/offensive-security-services/penetration-testing) [Social Engineering](https://www.obsglobal.com/cybersecurity/offensive-security-services#social_engineering) [Secure Code Analysis & Review](https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review) [Vulnerability Assessment](https://www.obsglobal.com/cybersecurity/offensive-security-services/vulnerability-assessment/) [Autonomous & Continuous Testing](https://info.obsglobal.com/autonomous-continuous-testing)<https://www.obsglobal.com/cybersecurity/offensive-security-services#secure_code_analysis_and_review>

![RSP Health-Color Thin](https://info.obsglobal.com/hubfs/RSP%20Health-Color%20Thin.png)

##### [Healthcare Cybersecurity](https://www.obsglobal.com/cybersecurity/rsp-health/)

[Risk Management Program](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HITRUST Readiness](https://www.obsglobal.com/cybersecurity/health-cybersecurity/) [HIPAA Compliance](https://www.obsglobal.com/cybersecurity/health-cybersecurity/)<https://www.obsglobal.com/cybersecurity/rsp-health/>

![CloudSecurity_icon_WP-jm](https://info.obsglobal.com/hubfs/CloudSecurity_icon_WP-jm.png)

##### [Cloud Security Services](https://www.obsglobal.com/cybersecurity/cloud-security-services/)

[Cloud Security Advisory](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Engineering](https://www.obsglobal.com/cybersecurity/cloud-security-services) [Cloud Security Assessment (FedRAMP/StateRAMP)](https://www.obsglobal.com/cybersecurity/cloud-security-services)

Innovation

![](https://info.obsglobal.com/hubfs/Bulb_Brain.png)

###### Innovation Lab

Careers

![](https://info.obsglobal.com/hubfs/Careers-Available_Positions.png)

###### CURRENT OPENINGS

![](https://info.obsglobal.com/hubfs/Careers_Working_At-Online.png)

###### OUR CULTURE

![](https://info.obsglobal.com/hubfs/Our-Benefits1.png)

###### OUR BENEFITS

![](https://info.obsglobal.com/hubfs/Address.png)

###### CULTURE CREDO

Insights

![](https://info.obsglobal.com/hubfs/BLOGS-icon-5ed95c0032155.png)

###### Blog

![](https://info.obsglobal.com/hubfs/CX%20Solutions%20Icon.png)

###### Customer Experience

![](https://info.obsglobal.com/hubfs/Agile%20Transformation%20Mega%20Menu%20Icon.png)

###### Agile Transformation

![](https://info.obsglobal.com/hubfs/b2b%20ecommerce%20icon.png)

###### B2B eCommerce

![](https://info.obsglobal.com/hubfs/Financial-Services-Icon.png)

###### Financial Services

Contact

![](https://info.obsglobal.com/hubfs/ContactUs_Contact-Us-Form.png)

###### Contact Us

![](https://info.obsglobal.com/hubfs/ContactUs-Locations.png)

###### Locations

×

# PCI v4.0 - Requirement 7:  All Things Accounts and Access Reviews

 By [Sherri Collis & Grant Sabesky](https://info.obsglobal.com/blog/author/sherri-collis-grant-sabesky) on April 14, 2022 (Last Updated on August 17, 2023 ) 

![](https://info.obsglobal.com/hubfs/All%20things%20accounts%20and%20access%20reviews.png)

### Get latest articles directly in your inbox, stay up to date

 Subscribe to our blog

### Topics

- Select a Topic

### Stay up to date

 Subscribe to our blog

### Subscribe Here!

[Back to main Blog](https://info.obsglobal.com/blog)

![](https://app.hubspot.com/settings/avatar/d41d8cd98f00b204e9800998ecf8427e)

###### Sherri Collis & Grant Sabesky

[![PCI-Blog-Intro-statement1](https://info.obsglobal.com/hs-fs/hubfs/PCI-Blog-Intro-statement1.png?width=711&name=PCI-Blog-Intro-statement1.png)](https://info.obsglobal.com/blog/topic/pcidss4-0)

 

User Accounts, Application and System Accounts, and Access Reviews

Remember the good ole days when Requirement 7 was all about general and privileged user accounts? Well, those days are done as of March 31, 2025! The Council has now added Application and System Accounts into the mix, as well as added more requirements to manage them.

---

## General and Privileged User Accounts

Let’s start with general and privileged user accounts (Requirement 7.2.4). The big change to this requirement is that **all user accounts** and related access privileges, **including third-party/vendor accounts**, must be reviewed at least once **every six months** to:

- Confirm access remains appropriate,
- Inappropriate access is removed, and
- Management acknowledges access remains appropriate.

I think we can all attest that new hire user accounts and terminated user accounts are well-managed – Human Resources generally has a lot to do with this! What we find lacking during PCI assessments has to do with what happens when an employee “moves, adds, and/or changes” their role. This requirement is an attempt at ensuring the changes over an employee’s tenure with an organization are appropriate for the job they are currently in versus an accumulation of all access privileges granted to the individual throughout their employment.

 

The good news for some organizations is that while this is a new requirement in v4.0, you may be addressing them already as part of other certifications, (i.e., SOX, HITRUST etc.). If so, you may have already done a lot of the heavy lifting required. If not, you will need to create a process within your organization to address these requirements, and I recommend putting this process in place sooner than later – if you haven’t been doing this in your organization, the determination and cleanup of privileges may take some time.

---

## Application and System Accounts

In v3.2.1, the application and system accounts weren’t called out in Requirement 7 other than to state the requirements did not apply to these accounts. PCI DSS v4.0 includes new requirements that introduce complexities for application and system accounts. These accounts (Requirement 7.2.5) now must address the following: 

- Be based on least privileges needed for operability of the system or application,
- Access must be limited to the systems, applications, or processes that specifically require their use,
- Policies and procedures must be in place to manage and assign application and system accounts and related access privileges, and
- Evidence must be provided to the QSA so they can examine privileges associated with system and application accounts, and in interview, must be able to verify that application and system accounts and access privileges are assigned and managed in accordance with the defined policy.

 

This could prove to be a challenge for many entities where application and system accounts have broad or administrative privileges, non-user interactive, and non-expiring credentials. Historically, application and system accounts were granted permissions for each of the devices without regard for level of privilege needed for the action required on that particular device. These accounts were given “blanket” access versus least privilege.

As with general and privileged user accounts, entities must do the following:

- Perform a targeted risk assessment to determine frequency of risk analysis required for these accounts,
- Confirm access remains appropriate,
- Inappropriate access is addressed, and
- Management acknowledges access remains appropriate.
  
  ---

## A Recommendation

When it comes to PCI 4.0 and changes to the accounts discussed above, we understand that addressing this requirement will be a lot of work for many organizations. We strongly recommend that before you address them, give careful consideration to how your organization can best identify, track, and manage these efforts. If available, make use of systems that are already in place, such as Jira, Aveksa, Zen, etc., which can leverage automated task scheduling or workflow functions including evidence collecting and facilitating reviews. Having tools that allow you to simplify this effort and streamline activities can give you an advantage.

*Note: These requirements are best practice until 31 March 2025, after which they will be required and assessed.*

---

As always, Online Business Systems is available to assist in helping to develop this portion of your PCI program. 

 

For additional insight and guidance from Online’s QSA team, explore our digital [PCI DSS v4.0 Resource Centre](https://info.obsglobal.com/pci-4.0-resources), where we have identified and dissected all of the changes and new requirements in the latest release of the PCI Standard.

 

 

 

 

Share this article

[Previous Post](https://info.obsglobal.com/blog/initiatives-to-deliver-a-b2b-customer-experience)

[Next Post](https://info.obsglobal.com/blog/vulnerability-scanning)

### Suggested Reading

[![](https://info.obsglobal.com/hubfs/PCI%204.0.1%20Course%20Correction%20or%20Alternate%20Route.png)](https://info.obsglobal.com/blog/pci-dss)

 tags

[PCI](https://info.obsglobal.com/blog/topic/pci) [Online Business Systems](https://info.obsglobal.com/blog/topic/online-business-systems)

##### [PCI SAQ A Changes: Course Correction or Alternate Route?](https://info.obsglobal.com/blog/pci-dss)

[Continue Reading](https://info.obsglobal.com/blog/pci-dss)

[![](https://info.obsglobal.com/hubfs/Calendar.png)](https://info.obsglobal.com/blog/when-to-get-a-threat-based-risk-assessment)

 tags

[Risk Assessments](https://info.obsglobal.com/blog/topic/risk-assessments) [Security](https://info.obsglobal.com/blog/topic/security)

##### [When to get a Threat-Based Risk Assessment](https://info.obsglobal.com/blog/when-to-get-a-threat-based-risk-assessment)

[Continue Reading](https://info.obsglobal.com/blog/when-to-get-a-threat-based-risk-assessment)

[![](https://info.obsglobal.com/hubfs/NLP%2c%20Data%20Analysis%20and%20Reporting%20blog.png)](https://info.obsglobal.com/blog/the-future-of-nlp-in-data-analysis-reporting)

 tags

[Artificial Intelligence](https://info.obsglobal.com/blog/topic/artificial-intelligence) [AI](https://info.obsglobal.com/blog/topic/ai)

##### [The Future of NLP in Data Analysis & Reporting](https://info.obsglobal.com/blog/the-future-of-nlp-in-data-analysis-reporting)

[Continue Reading](https://info.obsglobal.com/blog/the-future-of-nlp-in-data-analysis-reporting)

#### Submit a Comment

### Get latest articles directly in your inbox, stay up to date

 Subscribe to our blog

- [Our Company](https://www.obsglobal.com/our-company)
- [Our Executive Team](https://www.obsglobal.com/executive-team)
- [Partners & Clients](https://www.obsglobal.com/partners-and-clients)
- [Events](https://www.obsglobal.com/events-2)
- [News](https://www.obsglobal.com/blog-2)
- [Blog](https://info.obsglobal.com/blog)
- [Working at Online](https://www.obsglobal.com/working-at-online)
- [Available Positions](https://www.obsglobal.com/job-openings)
- [Locations](https://www.obsglobal.com/locations)
- [Contact Us](https://www.obsglobal.com/contact-us)

[![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/glassdoor%20hubspot%20footer%20icon.png?width=16&name=glassdoor%20hubspot%20footer%20icon.png)](https://www.glassdoor.ca/Overview/Working-at-Online-Business-Systems-EI_IE373050.11,34.htm)[![](https://info.obsglobal.com/hs-fs/hubfs/youtube-icon.png?width=16&name=youtube-icon.png)](https://www.youtube.com/channel/UCpB4PnAD2VGv9mb0jwaSl-Q) [![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/facebook%20hubspot%20footer%20icon.png?width=16&name=facebook%20hubspot%20footer%20icon.png)](https://www.facebook.com/Online-Business-Systems-Explore-Innovate-Lead-113440482070083/) [![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/linkedin%20hubspot%20footer%20icon.png?width=16&name=linkedin%20hubspot%20footer%20icon.png)](https://www.linkedin.com/company/online-business-systems) [![twitter final](https://info.obsglobal.com/hs-fs/hubfs/twitter%20final.png?width=19&height=19&name=twitter%20final.png)](https://x.com/obs_global)[![](https://info.obsglobal.com/hs-fs/hubfs/Hubspot%20footer%20social%20media%20icons/insta%20hubspot%20footer%20icon.png?width=16&name=insta%20hubspot%20footer%20icon.png)](http://www.instagram.com/obs_global/)<https://www.glassdoor.ca/Overview/Working-at-Online-Business-Systems-EI_IE373050.11,34.htm>

Copyright © 2025 Online Business Systems

- [Privacy Policy](https://www.obsglobal.com/privacy-policy/) - [Accessibility Policy](https://www.obsglobal.com/accessibility-policy/)

![](https://px.ads.linkedin.com/collect/?pid=650121&fmt=gif) ![](https://px.ads.linkedin.com/collect/?pid=650121&fmt=gif) ![](https://ws.zoominfo.com/pixel/ZKv0AacyinojUGYlbFCd)