PCI P2PE 1A-2.2: PCI P2PE 1A-2.2

What does 1A-2.2 require?

An application that can reach clear-text account data is deployed only on POI device types that 1A-1.1 has confirmed as PTS approved and that its Domain 2 assessment explicitly covers.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Domain 1: Encryption Device and Application Management – PCI P2PE

1A-1.1 PCI P2PE 1A-1.1
1A-1.2 PCI P2PE 1A-1.2
1A-1.3 PCI P2PE 1A-1.3
1A-1.4 PCI P2PE 1A-1.4
1A-2.1 PCI P2PE 1A-2.1
1B-1.1 PCI P2PE 1B-1.1
1B-1.2 PCI P2PE 1B-1.2
1B-2.1 PCI P2PE 1B-2.1

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All PCI P2PE controls