Changelog

Version history of this maturity model. The model version tracks changes to the content and structure; the PCI DSS version indicates which release of the standard the recommendations are aligned to.

v1.1.0 2026-09-04 PCI DSS 4.0.1

Self-assessment and coverage traceability
- New control-adoption self-assessment tool: track your status per control, add owner, target date, evidence and notes, and see overall and per-phase progress. Everything stays in your browser; nothing is sent to a server.
- Export and import your assessment as a JSON data file or an OSCAL assessment-results file, and export a remediation plan as CSV.
- New coverage and traceability matrix, mapping every PCI DSS v4.0.1 sub-requirement to the AWS security controls that address it.
- Matrix usability improvements: quick control search, fixed headers on scroll, and per-phase color cues.
v1.0.0 2026-09-03 PCI DSS 4.0.1

Initial release
- 12 PCI DSS requirements mapped across 4 maturity phases, with 51 AWS security control recommendations.
- Each recommendation includes PCI validation criteria (testing procedures and AWS evidence), shared-responsibility classification, and the customized-approach objective where eligible.
- Two reference architectures (single-account 3-tier and multi-account with a dedicated PCI OU) with per-control practical implementation guidance.
- Available in English, Spanish, and Portuguese.
- Recommendations aligned to PCI DSS v4.0.1.