Changelog
Version history of this maturity model. The model version tracks changes to the content and structure; the PCI DSS version indicates which release of the standard the recommendations are aligned to.
- v1.0.0 2026-09-03 PCI DSS 4.0.1Initial release
- 12 PCI DSS requirements mapped across 4 maturity phases, with 51 AWS security control recommendations.
- Each recommendation includes PCI validation criteria (testing procedures and AWS evidence), shared-responsibility classification, and the customized-approach objective where eligible.
- Two reference architectures (single-account 3-tier and multi-account with a dedicated PCI OU) with per-control practical implementation guidance.
- Available in English, Spanish, and Portuguese.
- Recommendations aligned to PCI DSS v4.0.1.
PCI DSS Security Maturity Model