PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 20-4: PCI P2PE 20-4

What does 20-4 require?

Where an entity processes or injects DUKPT or other derived keys for more than one acquirer, it segments its environments by using different BDKs for each financial institution, for each injection vendor, manufacturer or model, or for each platform, sales unit, market segment or region; a component provider uses one or more BDKs unique to each acquiring organisation and is able to support segmenting several BDKs for one acquirer.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.