PCI P2PE
Domain 2: Application Security – PCI P2PE

PCI P2PE 2A-3.2: PCI P2PE 2A-3.2

What does 2A-3.2 require?

The application's own logical interfaces pass no clear-text account data to other applications, including non-payment software, although passing it to the device's SRED-approved firmware is permitted.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 2: Application Security – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.