
PCI DSS 4.0 requirements affect how developers build payment systems. With future-dated requirements now mandatory as of March 2025, here’s what changed in Requirement 6 for secure development, the new MFA rules in Requirement 8, and how to reduce your PCI scope through architecture choices.