PCI P2PE 1D-1.2: PCI P2PE 1D-1.2

What does 1D-1.2 require?

Every new installation and update of an application is cryptographically signed before installation, by authorised personnel only, using an SCD under dual control.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Domain 1: Encryption Device and Application Management – PCI P2PE

1A-1.1 PCI P2PE 1A-1.1
1A-1.2 PCI P2PE 1A-1.2
1A-1.3 PCI P2PE 1A-1.3
1A-1.4 PCI P2PE 1A-1.4
1A-2.1 PCI P2PE 1A-2.1
1A-2.2 PCI P2PE 1A-2.2
1B-1.1 PCI P2PE 1B-1.1
1B-1.2 PCI P2PE 1B-1.2

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All PCI P2PE controls