PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 20-2: PCI P2PE 20-2

What does 20-2 require?

Where a POI device connects directly to several entities that decrypt its account data, such as different acquirers, it holds for each one a separate, fully independent key or key set, none of which is a variant of another.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.