PCI P2PE
Domain 2: Application Security – PCI P2PE

PCI P2PE 2B-1.4: PCI P2PE 2B-1.4

What does 2B-1.4 require?

The application is developed to secure coding practice, with least privilege, fail-safe exception handling and defensive handling of every logical input interface, preventing common coding vulnerabilities, and with risk assessment such as threat modelling covering all functions, decision points and processes, listing threats and vulnerabilities and documenting the corrections made.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 2: Application Security – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.