As part of PCI DSS v4.0.1 reporting of script changes, security header changes and business and technical justifications must be kept on record and reported on at least weekly. C/side enterprise customers who opted into the PCI DSS dashboard now automatically receive a report weekly each Monday.
The report includes the scripts present on the webpage and their business justification as well as the security header changes of the past week. Each member of the c/side team will receive the report.
The report is also available for download in the PCI DSS dashboard.
