Card and PIN issuance, in-house or contracted, is controlled by separating access to customer account information from PIN information, embossing and encoding in a secure area with inventory and accounting controls for card stock including test and reject cards and dual control over blank stock storage, controls over captured and returned cards handled independently of the mail function, random mailing of control cards with delivery validated within days, PIN generation at issuance with encrypted storage and need-to-know access reviewed periodically, no printed or on-screen PINs, PIN mailers secured like cards and never sent with the card, encrypted transmission, and account lockout after a limited number of failed PIN entries.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.