--- title: "Decoding PCI DSS v4.0 and Enhancing Security with DMARC: A Guide | DMARC Report" description: "DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From header." image: "https://dmarcreport.com/og/blog/pci-dss-v4-0-decoded-strengthening-security-with-dmarc.png" canonical: "https://dmarcreport.com/blog/pci-dss-v4-0-decoded-strengthening-security-with-dmarc/" --- Quick Answer DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible \`From\` header. According to Google's February 2024 bulk sender requirements, a DMARC policy of at least \`p=none\` is now mandatory for any domain sending 5,000+ messages per day to Gmail users. Related: [Free DMARC Checker](/tools/dmarc-checker/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fpci-dss-v4-0-decoded-strengthening-security-with-dmarc%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Decoding%20PCI%20DSS%20v4.0%20and%20Enhancing%20Security%20with%20DMARC%3A%20A%20Guide&url=undefined%2Fblog%2Fpci-dss-v4-0-decoded-strengthening-security-with-dmarc%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fpci-dss-v4-0-decoded-strengthening-security-with-dmarc%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fpci-dss-v4-0-decoded-strengthening-security-with-dmarc%2F&title=Decoding%20PCI%20DSS%20v4.0%20and%20Enhancing%20Security%20with%20DMARC%3A%20A%20Guide "Share on Reddit") [ ](mailto:?subject=Decoding%20PCI%20DSS%20v4.0%20and%20Enhancing%20Security%20with%20DMARC%3A%20A%20Guide&body=Check out this article: undefined%2Fblog%2Fpci-dss-v4-0-decoded-strengthening-security-with-dmarc%2F "Share via Email") ![Decoding PCI DSS v4.0 and Enhancing Security with DMARC: A Guide](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) ## Try Our Free DMARC Checker Validate your DMARC policy, check alignment settings, and verify reporting configuration. [ Check DMARC Record → ](/tools/dmarc-checker/) ![Copy of dmarc autospf 1 150x150](https://media.mailhop.org/dmarcreport/images/2024/05/Copy-of-dmarc-autospf-1-150x150.jpg) > DMARC is the only email authentication protocol that gives you both enforcement and visibility, says Brad Slavin, General Manager of DuoCircle. SPF and DKIM authenticate silently - DMARC tells you what happened and lets you control the outcome. That combination of reporting and policy is why DMARC adoption is accelerating. DMARC ([RFC 7489](https://datatracker.ietf.org/doc/html/rfc7489)) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible `From` header. According to Google’s February 2024 bulk sender requirements, a DMARC policy of at least `p=none` is now mandatory for any domain sending 5,000+ messages per day to Gmail users. PCI DSS v4.0 (effective March 2025) requires organizations handling cardholder data to implement DMARC with a policy of at least `p=quarantine` on domains used in customer communications. DMARC Report Decoding PCI DSS v4.0 and Enhancing Security with DMARC: A Guide ``` ``` / ``` ``` RSS Feed ``` Share Link Embed ``` /\*! This file is auto-generated \*/ ’ title=“Embed Code” class=“input-embed input-embed-12964” readonly/> ``` ``` Does your business involve your customers making [card payments](https://www.psr.org.uk/our-work/card-payments/)? If yes, this one is for you! _Now that digital payments have become the backbone of most businesses, you cannot afford to let any unauthorized entity snoop in on your transactions or your customers’ card details_. They could use this information to unleash havoc on your business by either committing fraud or pulling off[data breaches](https://www.insurancebusinessmag.com/us/news/cyber/report-us-has-the-highest-average-cost-for-data-breaches-229321.aspx) that compromise **sensitive customer information**. With the situation only getting worse with each passing day, it is crucial to know that implementing the latest security measures to safeguard your payment processes and your business’ integrity is now a \*\*non-negotiable thing. To make the digital space a little less daunting for your customers, the [Payment Card Industry Security Standards Council (PCI SSC)](https://en.wikipedia.org/wiki/Payment%5FCard%5FIndustry%5FData%5FSecurity%5FStandard#:~:text=The%20Payment%20Card%20Industry%20Data,mandated%20by%20the%20card%20brands.) has \*\*made it mandatory for organizations that process card transactions to comply with the fourth edition of the PCI DSS - PCI DSS v4.0\. A major update of this edition is that these organizations must authenticate their domains with [DMARC](https://dmarcreport.com/) by 2025. As the losses associated with card fraud exceed [30 billion U.S. dollars](https://www.statista.com/statistics/1394119/global-card-fraud-losses/), this alarming situation calls for a proactive approach like complying with the PCI DSS v4.0\. Let us dig deeper into this latest update and learn more about how the PCI DSS v4.0 will **impact your business**. ## What is PCI DSS? Before we get into the how and why, let us start from the basics - understanding what the Payment Card Industry Data Security Standard (PCI DSS) is. _As you already know, the payment card industry isn’t really immune to fraud and cyber-attacks_. Looking at the severity and the frequency of cyberattacks targeted at cardholders, the key players of the card industry, such as [Visa](https://usa.visa.com/), [Mastercard](https://www.mastercard.us/en-us.html), [American Express](https://www.americanexpress.com/us/), and [Discover](https://www.discover.com/), came together to create a defense mechanism against these types of attacks and ensure the **integrity of card transitions**. This is what gave rise to the Payment Card Industry Data Security Standard (PCI DSS). ![Dmarc check](https://media.mailhop.org/dmarcreport/images/2024/05/dmarc-check-14.jpg) The main objective of PCI DSS is to reduce the risk of [card data breaches](https://www.livemint.com/companies/news/credit-card-fraud-american-express-blames-third-party-vendor-for-data-breach-says-report-11709700038045.html) by requiring businesses to adhere to best security practices, such as maintaining a secure network, protecting cardholder data, implementing **strong access control measures**, regularly monitoring and testing networks, and maintaining an information security policy. ## What Makes PCI DSS v4.0 a Significant Update? PCI SSC released the latest iteration of PCI DSS, which is PCI DSS v4.0, on March 31, 2022\. This monumental move introduced some \*\*notable updates that align with the ever-evolving threat landscape and [technological landscape](https://www.financialexpress.com/life/technology-navigating-the-evolving-landscape-data-centre-trends-in-2024-3420582/). Let us take a look at the new provisions of PCI DSS v4.0 that were released to effectively protect cardholder data. ## Enhanced Flexibility and Customization The PCI DSS v4.0 offers flexibility to organizations to implement tailored solutions instead of strictly adhering to prescribed methods, the only condition being that they should **meet security standards**. This is done to encourage more and more organizations to innovate while maintaining a secure environment for cardholders. ## Stronger Authentication Measures The fourth edition of PCI DSS focuses on [authentication and encryption](https://fastercapital.com/topics/encryption-and-authentication.html), which are integral aspects of protecting cardholder data. The reason why PCI DSS v4.0 \*\*prioritizes authentication protocols is that it is one of the most reliable ways to tackle the increasing sophistication of cyber threats. ## Integration of Emerging Technologies PCI DSS v4.0 recognizes that stagnancy in technology adoption cannot wage against the evolving [card-based cyber threats](https://www.cshub.com/attacks/news/air-europa-data-breach). As a result, it opens the scope for \*\*integrating new and emerging technologies while complying with the standard norms. This way, the organization does not miss out on innovation and security. ## Emphasis on Continuous Monitoring and Testing _The latest edition of PCI DSS reinforces the notion that comprehensive security is a continuous effort rather than occasional checks_. By making regular monitoring and testing a crucial aspect of PCI DSS v4.0, organizations are compelled to acknowledge that unless they \*\*monitor and test their security measures regularly, they cannot ensure that their payment systems are adequately protected against potential breaches. ## Regular Reporting and Accountability Without accountability, even the most robust [security protocols](https://cyberpedia.reasonlabs.com/EN/security%20protocols.html) can become ineffective, and PCI DSS v4.0 recognizes this. This is why the \*\*latest security standards emphasize streamlining the compliance process instead of leaving it to chance. ## Who is the PCI DSS v4.0 For? The simple answer to this is - every organization involved in \*\*handling card payments in any capacity! _Whether you are a merchant, processor, acquirer, issuer, or service provider, the new standards by the Payment Card Industry Security Standards Council apply to you_. Here’s a closer look at who needs to comply with PCI DSS v4.0: - Organizations that are involved in storing, processing, and transmitting cardholders’ data. - _Entities that may not directly handle the merchant side of transactions, but their role involves managing credit and debit card operations_. - Any \*\*third-party company that provides services managing cardholder data on behalf of other businesses - Any business or individual whose actions can affect the security of the [cardholder data environment](https://stripe.com/in/resources/more/what-is-the-cardholder-data-environment), even indirectly ## What is the Role of Email Authentication in PCI DSS v4.0? The basic premise of version 4.0 of the Payment Card Industry Data Security Standard (PCI DSS) is **improved fraud prevention**, and since emails are the most common vectors for breaches and fraud, it makes sense for PCI DSS v4.0 to prioritize [email authentication](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/). ![DMARC And Email Statistics 1 416x1024](https://media.mailhop.org/dmarcreport/images/2024/06/DMARC-And-Email-Statistics-1-416x1024.jpg) Here is how PCI DSS v4.0 steps in on [email security](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/) through some specific measures: ## Strong Access Controls for Email Systems PCI DSS 4.0 requires organizations to develop strict access controls over their email systems through robust measures like [multi-factor authentication](https://www.cyberdaily.au/security/10556-protecting-australian-loyalty-programs-with-multi-factor-authentication), complex passwords, regular reviews of the email ecosystem, etc. This step ensures that no one gains \*\*unauthorized access to your digital space and reduces the potential chances of email-borne attacks. ## How Do You Protect Saved Card Details? _The PCI DSS v4.0 ensures that cardholder data stored within email systems is safe and encrypted using relevant access control measures_. So even if someone tries to breach the system, the cardholders’ \*\*details are safe and out of their reach. ## Responding to Email-Related Security Alerts Proper \*\*monitoring and responses to email security-related alerts are important aspects of PCI DSS v4.0\. This means that organizations must review their system logs on a regular basis to detect any sign of suspicious activity , which would make responding to [potential threats](https://www.barharbor.bank/resources/financial-education/top-5-security-risks-in-credit-card-payments--and-how-to-conquer-them-#:~:text=Most%20commonly%2C%20skimming%20occurs%20when,skimmer%20on%20your%20existing%20terminal.) easier and more efficient. ## Mandatory Implementation of DMARC One of the most important requirements of PCI DSS v4.0 is the implementation of Domain-based Message Authentication, Reporting, and Conformance (DMARC), a protocol that plays a crucial role in the **fight against** [email spoofing and impersonation](https://medium.com/@digitaljadhav/email-spoofing-vs-impersonation-understanding-the-difference-for-better-cybersecurity-5290c9da0e1f). ## Why is DMARC Authentication Important for PCI DSS v4.0 Compliance? It is no surprise that DMARC provides a robust defense against serious [cyber threats](https://www.forbes.com/sites/forbestechcouncil/2023/12/18/navigating-the-unpredictable-the-reality-of-cyber-threats/?sh=68268b453d1c) by simply verifying that only authorized senders can use your organization’s domain to send emails. But how is it relevant for organizations that process payments? Broadly speaking, DMARC significantly reduces the risk of [malicious actors sending fraudulent emails](https://www.cpomagazine.com/cyber-security/massive-ad-fraud-campaign-sends-million-of-spam-emails-from-thousands-of-hijacked-reputable-domains/) on your behalf and gaining \*\*unauthorized access to sensitive payment information. ![DMARC Key Statistical Trends 413x1024](https://media.mailhop.org/dmarcreport/images/2024/05/DMARC-Key-Statistical-Trends-413x1024.jpg) Here’s how DMARC can make [PCI DSS v4.0 compliance](https://dmarcreport.com/blog/mandatory-requirement-dmarc-compliance-included-in-pci-dss-version-4-0/) all the **more secure and effective**: ## Protection Against Fraud _When sending transaction or payment-related emails, you cannot afford to have someone else, especially not an unauthorized person, send emails on your behalf_. This is where DMARC comes into play! This authentication protocol ensures that emails sent from your domain are genuine, \*\*preventing fraudsters from deceiving your customers and gaining access to [sensitive payment information](https://www.ctinsider.com/business/article/ct-atm-credit-card-skimming-device-18591873.php). ## Enhanced Email Deliverability Apart from preventing email frauds like phishing, DMARC also helps to [improve email deliverability](https://support.dmarcreport.com/support/solutions/articles/5000882477-improving-email-deliverability-with-dmarc) \- the ability of emails to reach the recipient’s inbox without being blocked or rejected by the receiving server. \_Maintaining seamless communication with your customers is important, particularly for **transaction confirmations**, notifications, etc. and you certainly wouldn’t want such important emails to end up in the [spam folder](https://dmarcreport.com/blog/how-can-dmarc-improve-email-deliverability-and-reduce-phishing-risks/). This is why DMARC is mandatory for PCI DSS v4.0 compliance. ## Seamless Compliance with Security Standards By including DMARC as a part of your security efforts, you not only mitigate the risk of [grave card fraud](https://wgntv.com/news/wgn-investigates/seller-beware-merchant-left-with-40k-bill-after-credit-card-fraud/) but also show your customers and key stakeholders that your organization prioritizes security and adheres to the **highest standards**. ## Less Risk of Financial Fraud DMARC helps protect your business from the financial fallout of data breaches. By ensuring only authorized senders can use your **email domain**, it reduces the [risk of cyberattacks](https://www.hindustantimes.com/technology/indian-organisations-at-very-high-risk-of-cyber-attacks-says-survey-101703425356034.html) like phishing. This simple step can prevent hefty fines from regulators, avoid legal troubles, and protect your reputation. ![No dmarc record found 7650](https://media.mailhop.org/dmarcreport/images/2024/05/no-dmarc-record-found-7650-1.jpg) ## Compliance Made Easy with DMARCReport While there is ample time until March 2025 to [implement DMARC](https://dmarcreport.com/blog/dmarc-best-practices-for-domains-and-subdomains/), the sooner you employ this authentication protocol to comply with **PCI DSS v4.0**, the better. After all, why would you want to rush up the process when you can refine and optimize your [DMARC policies](https://dmarcreport.com/dmarc-policy/) with early implementation? Get in touch with us at \*\*DMARCReport to secure your email channels effectively, protect your customers’ [sensitive card data](https://www.afr.com/technology/weeks-of-delays-card-security-stolen-as-firstmac-hack-deepens-20240513-p5jd9w), and establish a strong stance on cybersecurity. ## Topics [ DMARC ](/tags/dmarc/)[ email security ](/tags/email-security/)[ News ](/tags/news/) ![Vasile Diaconu](https://media.mailhop.org/dmarcreport/images/team/vasile-diaconu.jpg) [ Vasile Diaconu ](/authors/vasile-diaconu/) Operations Lead Operations Lead at DuoCircle. Runs project management, developer coordination, and technical support execution for DMARC Report. [LinkedIn Profile →](https://www.linkedin.com/in/vasile-diaconu/) ## Take control of your DMARC reports Turn raw XML into actionable dashboards. Start free - no credit card required. [Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) ## Related Articles [ Foundational 4m Akira flaunts victims, Idaho targets orthodontist, AI granny protects Nov 22, 2024 ](/blog/akira-flaunts-victims-idaho-targets-orthodontist-ai-granny-protects/)[ Foundational 4m Alternatives to DMARCLY's Blog Section for Learning About Email Authentication and DMARC Nov 6, 2023 ](/blog/alternatives-to-dmarclys-blog-section-for-learning-about-email-authentication-and-dmarc/)[ Foundational 4m Ambient Light Spying, Cybersecurity Prices Drop, Euro 2024 Threats Jul 10, 2024 ](/blog/ambient-light-spying-cybersecurity-prices-drop-euro-2024-threats/)[ Foundational 4m Banks Drop OTPs, Major Cyber Heist, Spying Spouses Arrested Jul 18, 2024 ](/blog/banks-drop-otps-major-cyber-heist-spying-spouses-arrested/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Decoding PCI DSS v4.0 and Enhancing Security with DMARC: A Guide","description":"DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From header.","url":"https://dmarcreport.com/blog/pci-dss-v4-0-decoded-strengthening-security-with-dmarc/","datePublished":"2024-05-14T13:00:02.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2024-05-14T13:00:02.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/vasile-diaconu/#person","name":"Vasile Diaconu","url":"https://dmarcreport.com/authors/vasile-diaconu/","jobTitle":"Operations Lead","description":"Vasile Diaconu is the Operations Lead at DuoCircle, the company behind DMARC Report and AutoSPF. He coordinates between engineering, product, and technical support - running project management, interfacing with developers on customer-reported issues, and making sure work that comes in through the support channel actually gets closed out. Vasile sits at the intersection of customer feedback and engineering execution, giving him a direct view of which email authentication problems customers hit most often in production.","image":"https://media.mailhop.org/dmarcreport/images/team/vasile-diaconu.jpg","knowsAbout":["SaaS Operations","Technical Support Coordination","Customer Issue Resolution","Engineering Program Management","Deployment Operations"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/vasile-diaconu/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/pci-dss-v4-0-decoded-strengthening-security-with-dmarc/"},"articleSection":"foundational","keywords":"DMARC, email security, News","wordCount":1905,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg","caption":"Decoding PCI DSS v4.0 and Enhancing Security with DMARC: A Guide","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"Decoding PCI DSS v4.0 and Enhancing Security with DMARC: A Guide","item":"https://dmarcreport.com/blog/pci-dss-v4-0-decoded-strengthening-security-with-dmarc/"}]} ```