PCI DSS v4.0.1 Readiness Pack — 302-Control Assessment Workbook, SAQ Guide & Procedures (Word + Excel)

A complete readiness system for PCI DSS v4.0.1 — the current version of the standard — built for merchants and service providers who need to get assessment-ready without starting from a blank page. A scoping method, an SAQ selection guide, the core procedures assessors expect, and two workbooks that track all 302 requirements and sub-requirements plus every recurring compliance task.

Built to the current standard: PCI DSS v4.0.1 (v4.0 retired 31 Dec 2024; v3.2.1 retired 31 Mar 2024). Every requirement is in force — including the formerly future-dated controls mandatory since 31 March 2025, such as payment-page script security (6.4.3), tamper detection (11.6.1), and expanded MFA.

What's included (15 items):

• Start Here Guide — the roadmap and how the pieces fit together
• PCI DSS Readiness & Scoping Guide — validation path, defining the CDE, segmentation, the prioritized approach, evidence discipline
• SAQ Selection Guide — SAQ A, A-EP, B, B-IP, C, C-VT, D and P2PE: who qualifies, and the mistakes that invalidate a self-assessment
• CDE Scoping & Segmentation Worksheet (Word form)
• Targeted Risk Analysis Template (Word form) — for the requirements that demand a documented TRA
• Incident Response Plan Template — Requirement 12.10, including the PAN-found trigger
• Vulnerability & Patch Management Procedure — Requirements 6.3 & 11.3 (one-month rule for critical/high patches, ASV scanning)
• Access Control & Authentication Procedure — Requirements 7 & 8 (least privilege, 12-character passwords, MFA)
• Logging & Monitoring Procedure — Requirement 10 (12-month retention, daily review)
• Encryption & Key Management Procedure — Requirements 3 & 4 (stored PAN, TLS, full key lifecycle)
• Service Provider Management Procedure — Requirement 12.8 (agreements, responsibility matrix, AoC monitoring)
• E-Commerce Payment Page Security Procedure — Requirements 6.4.3 & 11.6.1
• Readiness Assessment Workbook (Excel) — all 302 requirements & sub-requirements, status dropdowns, evidence and owner fields, readiness dashboard by requirement
• Compliance Registers (Excel) — remediation tracker with days-open counter, evidence register, service provider register, periodic tasks & testing calendar with the standard's frequencies pre-loaded
• Copyright & Licence Terms

Who it's for: Merchants preparing an SAQ or a QSA-led RoC, service providers validating under SAQ D, and the consultants, IT leads, and compliance managers who run PCI as a year-round program.

How it works: Settle scope first with the guide and worksheet, confirm your SAQ, then work the 302-control checklist — every gap lands in the remediation tracker with an owner and date, the procedures give you the documented controls assessors ask for, and the periodic-tasks calendar keeps quarterly scans and annual tests from ever surprising you.

Please note: Templates and general information, not a certification, audit, or guarantee of compliance. Checklist summaries are plain-language readiness aids — assess against the official PCI DSS v4.0.1 document, available free from the PCI Security Standards Council.

Copyright & licence: © 2026 Zee Consulting. All rights reserved. This product and everything in it is the intellectual property of Zee Consulting. Your purchase gives one named organization a licence to use and customize the documents for its own internal business — nothing more. The files must not be resold, shared, redistributed, sublicensed, or given to clients or any other organization, in original or modified form. Anyone who uses these materials without a licence is infringing copyright, and Zee Consulting reserves the right to pursue litigation and claim damages and legal costs to the fullest extent permitted by law. The full Copyright & Licence Terms are included in the download (Copyright_and_Licence_Terms.docx) and inside the Start Here guide.

Requirements: Microsoft Word and Excel (or compatible: Google Docs/Sheets, LibreOffice). Instant download after purchase — no shipping, no waiting.