PCI DSS v4.0 · UAE
PCI DSS v4.0 implementation & certification in United Arab Emirates.
MAST's Dubai-led team delivers PCI DSS v4.0 (Payment Card Industry Data Security Standard v4.0.1) programmes for regulated enterprises in United Arab Emirates — mapped to CBUAE, SIA, ADHICS, TDRA and other local requirements.
Local context
Why PCI DSS v4.0 matters in UAE
Boards and regulators across United Arab Emirates are increasingly mandating an independently certified Info & Cyber Security programme. PCI DSS v4.0 is the global benchmark and the fastest route to demonstrating control to CBUAE and audit committees.
- Mapped to CBUAE requirements
- Mapped to SIA requirements
- Mapped to ADHICS requirements
- Mapped to TDRA requirements
- Mapped to DFSA requirements
Engagement model
From Dubai, end-to-end
- 1. Gap assessment — current state vs PCI DSS v4.0 clauses & Annex controls, local regulator overlay.
- 2. Design & document — policy suite, risk methodology, Statement of Applicability tailored to UAE.
- 3. Implement & train — control roll-out, awareness programme, evidence library.
- 4. Internal audit — Lead Auditor-led pre-certification audit and management review.
- 5. Certification support — Stage 1 + Stage 2 on-site with accredited certification bodies.
Regulatory overlap
Local regulations PCI DSS v4.0 can satisfy in UAE.
Where PCI DSS v4.0 controls map directly to United Arab Emirates-specific obligations, MAST builds a single evidence library that satisfies both — no duplicated audits.
ADGM Financial Services Regulatory Authority
ADGM Data Protection Regulations
Central Bank of the UAE
CBUAE Information Security Regulation
Central Bank of the UAE
CBUAE IT Risk Regulation
Central Bank of the UAE
CBUAE Outsourcing Regulation
DIFC Authority
DIFC Data Protection Law
Dubai Electronic Security Center
Dubai DESC Information Security Regulation
Telecom & Digital Government Regulatory Authority
UAE Information Assurance Framework
Telecom & Digital Government Regulatory Authority
UAE IoT Security Policy
UAE Data Office
UAE Personal Data Protection Law
Related