{"product_id":"pci-dss-v4-0-1-readiness-pack-302-control-assessment-workbook-saq-guide-procedures-word-excel","title":"PCI DSS v4.0.1 Readiness Pack — 302-Control Assessment Workbook, SAQ Guide \u0026 Procedures (Word + Excel)","description":"\u003cp\u003eA complete readiness system for PCI DSS v4.0.1 — the current version of the standard — built for merchants and service providers who need to get assessment-ready without starting from a blank page. A scoping method, an SAQ selection guide, the core procedures assessors expect, and two workbooks that track all 302 requirements and sub-requirements plus every recurring compliance task.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eBuilt to the current standard:\u003c\/strong\u003e PCI DSS v4.0.1 (v4.0 retired 31 Dec 2024; v3.2.1 retired 31 Mar 2024). Every requirement is in force — including the formerly future-dated controls mandatory since 31 March 2025, such as payment-page script security (6.4.3), tamper detection (11.6.1), and expanded MFA.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eWhat's included (15 items):\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eStart Here Guide — the roadmap and how the pieces fit together\u003c\/li\u003e\n\u003cli\u003ePCI DSS Readiness \u0026amp; Scoping Guide — validation path, defining the CDE, segmentation, the prioritized approach, evidence discipline\u003c\/li\u003e\n\u003cli\u003eSAQ Selection Guide — SAQ A, A-EP, B, B-IP, C, C-VT, D and P2PE: who qualifies, and the mistakes that invalidate a self-assessment\u003c\/li\u003e\n\u003cli\u003eCDE Scoping \u0026amp; Segmentation Worksheet (Word form)\u003c\/li\u003e\n\u003cli\u003eTargeted Risk Analysis Template (Word form) — for the requirements that demand a documented TRA\u003c\/li\u003e\n\u003cli\u003eIncident Response Plan Template — Requirement 12.10, including the PAN-found trigger\u003c\/li\u003e\n\u003cli\u003eVulnerability \u0026amp; Patch Management Procedure — Requirements 6.3 \u0026amp; 11.3 (one-month rule for critical\/high patches, ASV scanning)\u003c\/li\u003e\n\u003cli\u003eAccess Control \u0026amp; Authentication Procedure — Requirements 7 \u0026amp; 8 (least privilege, 12-character passwords, MFA)\u003c\/li\u003e\n\u003cli\u003eLogging \u0026amp; Monitoring Procedure — Requirement 10 (12-month retention, daily review)\u003c\/li\u003e\n\u003cli\u003eEncryption \u0026amp; Key Management Procedure — Requirements 3 \u0026amp; 4 (stored PAN, TLS, full key lifecycle)\u003c\/li\u003e\n\u003cli\u003eService Provider Management Procedure — Requirement 12.8 (agreements, responsibility matrix, AoC monitoring)\u003c\/li\u003e\n\u003cli\u003eE-Commerce Payment Page Security Procedure — Requirements 6.4.3 \u0026amp; 11.6.1\u003c\/li\u003e\n\u003cli\u003eReadiness Assessment Workbook (Excel) — all 302 requirements \u0026amp; sub-requirements, status dropdowns, evidence and owner fields, readiness dashboard by requirement\u003c\/li\u003e\n\u003cli\u003eCompliance Registers (Excel) — remediation tracker with days-open counter, evidence register, service provider register, periodic tasks \u0026amp; testing calendar with the standard's frequencies pre-loaded\u003c\/li\u003e\n\u003cli\u003eCopyright \u0026amp; Licence Terms\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cstrong\u003eWho it's for:\u003c\/strong\u003e Merchants preparing an SAQ or a QSA-led RoC, service providers validating under SAQ D, and the consultants, IT leads, and compliance managers who run PCI as a year-round program.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eHow it works:\u003c\/strong\u003e Settle scope first with the guide and worksheet, confirm your SAQ, then work the 302-control checklist — every gap lands in the remediation tracker with an owner and date, the procedures give you the documented controls assessors ask for, and the periodic-tasks calendar keeps quarterly scans and annual tests from ever surprising you.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003ePlease note:\u003c\/strong\u003e Templates and general information, not a certification, audit, or guarantee of compliance. Checklist summaries are plain-language readiness aids — assess against the official PCI DSS v4.0.1 document, available free from the PCI Security Standards Council.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eCopyright \u0026amp; licence:\u003c\/strong\u003e © 2026 Zee Consulting. All rights reserved. This product and everything in it is the intellectual property of Zee Consulting. Your purchase gives one named organization a licence to use and customize the documents for its own internal business — nothing more. The files must not be resold, shared, redistributed, sublicensed, or given to clients or any other organization, in original or modified form. Anyone who uses these materials without a licence is infringing copyright, and Zee Consulting reserves the right to pursue litigation and claim damages and legal costs to the fullest extent permitted by law. The full Copyright \u0026amp; Licence Terms are included in the download (Copyright_and_Licence_Terms.docx) and inside the Start Here guide.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eRequirements:\u003c\/strong\u003e Microsoft Word and Excel (or compatible: Google Docs\/Sheets, LibreOffice). Instant download after purchase — no shipping, no waiting.\u003c\/p\u003e","brand":"Zee Consulting","offers":[{"title":"Default Title","offer_id":67832463327419,"sku":"ZEE-PCI-007","price":299.0,"currency_code":"CAD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0777\/6570\/5915\/files\/pci-dss-readiness-pack-cover.png?v=1792697612","url":"https:\/\/zeeconsulting.myshopify.com\/products\/pci-dss-v4-0-1-readiness-pack-302-control-assessment-workbook-saq-guide-procedures-word-excel","provider":"Zee Consulting Templates","version":"1.0","type":"link"}