The Payment Card Industry Security Standards Council (PCI CCS) has updated the PCI Data Security Standard (DSS) to version 4.0. Changes include “expansion of Requirement 8 to implement multi-factor authentication (MFA) for all access into the cardholder data environment, and increased flexibility for organizations to demonstrate how they are using different methods to achieve security objectives.” The current version of PCI DSS, v.3.2.1, will be retired on March 31, 2024. Ref https://www.pcisecuritystandards.org/about_us/press_releases/pr_03312022
