PCI DSS v4.0 – Control Mapping
This page shows which Wombat controls cover which requirements of PCI DSS v4.0.
| Framework Control | Requirement | Wombat Controls | Severity | Pillar | Category |
|---|---|---|---|---|---|
Req 1 – Install and maintain network security controls |
Req 1 – Install and maintain network security controls |
🟠 |
Security |
network-security |
|
Req 1.2 – Network segmentation |
Req 1.2 – Network segmentation |
🟠 |
Security |
network-security |
|
Req 2.2 – Secure configuration baselines |
Req 2.2 – Secure configuration baselines |
🟠 |
Security |
identity-access |
|
Req 3 – Protect stored cardholder data |
Req 3 – Protect stored cardholder data |
🟠 |
Security |
identity-access |
|
Req 3.5 – Cryptographic keys protection |
Req 3.5 – Cryptographic keys protection |
🔴 🟠 |
Security |
identity-access |
|
Req 3.6 – Encryption of stored cardholder data |
Req 3.6 – Encryption of stored cardholder data |
🟠 |
Security |
identity-access |
|
Req 4 – Encryption of cardholder data |
Req 4 – Encryption of cardholder data |
🟠 |
Agentic |
logging-monitoring |
|
Req 4 – Protect cardholder data with strong cryptography during transmission |
Req 4 – Protect cardholder data with strong cryptography during transmission |
🟠 |
Security |
identity-access |
|
Req 6 – Develop and maintain secure systems |
Req 6 – Develop and maintain secure systems |
🟡 |
Security |
container-security |
|
Req 6 – Develop and maintain secure systems and software |
Req 6 – Develop and maintain secure systems and software |
🟠 |
Security |
container-security |
|
Req 6.3 – Software development processes |
Req 6.3 – Software development processes |
🟠 |
Security |
container-security |
|
Req 6.4 – Develop systems using secure coding |
Req 6.4 – Develop systems using secure coding |
🟠 |
Security |
identity-access |
|
Req 6.4 – Develop systems using secure coding standards |
Req 6.4 – Develop systems using secure coding standards |
🟡 |
Security |
identity-access |
|
Req 6.4 – Prevent common vulnerabilities |
Req 6.4 – Prevent common vulnerabilities |
🟠 |
Security |
network-security |
|
Req 6.4 – Secure development lifecycle |
Req 6.4 – Secure development lifecycle |
🟠 🟡 🟢 |
Agentic |
logging-monitoring, reliability-design |
|
Req 6.5 – Secure coding practices |
Req 6.5 – Secure coding practices |
🟠 🟢 |
Agentic |
logging-monitoring, reliability-design |
|
Req 7 – Restrict access by business need to know |
Req 7 – Restrict access by business need to know |
🔴 🟠 |
Agentic, Security |
agentic-governance, identity-access |
|
Req 7.2 – Access based on least privilege |
Req 7.2 – Access based on least privilege |
🟠 |
Agentic |
agentic-governance |
|
Req 7.2 – Establish access based on least privilege |
Req 7.2 – Establish access based on least privilege |
🔴 |
Security |
identity-access |
|
Req 8 – Identify and authenticate access |
Req 8 – Identify and authenticate access |
🔴 🟠 |
Agentic, Security |
identity-access, logging-monitoring |
|
Req 8.3 – Strong authentication mechanisms |
Req 8.3 – Strong authentication mechanisms |
🔴 |
Security |
identity-access |
|
Req 10 – Log and monitor access to network resources and cardholder data |
Req 10 – Log and monitor access to network resources and cardholder data |
🟠 |
Security |
logging-monitoring |
|
Req 10 – Log and monitor all access |
Req 10 – Log and monitor all access |
🟠 |
Security |
identity-access |
|
Req 10 – Monitor and detect threats |
Req 10 – Monitor and detect threats |
🟡 |
Agentic |
logging-monitoring |
|
Req 11.3 – Vulnerability scans |
Req 11.3 – Vulnerability scans |
🟡 |
Security |
container-security |
|
Req 11.4 – Internal and external network testing |
Req 11.4 – Internal and external network testing |
🟡 |
Security |
identity-access |
|
Req 11.5 – Detect intrusions and unexpected file changes |
Req 11.5 – Detect intrusions and unexpected file changes |
🟠 |
Security |
identity-access |
|
Req 12.8 – Service provider management |
Req 12.8 – Service provider management |
🟠 |
Security |
container-security |
|
Req 12.10 – Incident response plan and testing |
Req 12.10 – Incident response plan and testing |
🟡 |
Security |
identity-access |
|
Requirement 6.5: Changes to all system components are managed securely |
Requirement 6.5: Changes to all system components are managed securely |
🟡 |
Operational Excellence |
deployment-automation |
|
Requirement 12.3.2: Perform targeted risk analyses |
Requirement 12.3.2: Perform targeted risk analyses |
🟠 |
Operational Excellence |
logging-monitoring |