PCI P2PE
Domain 2: Application Security – PCI P2PE

PCI P2PE 2B-4.1: PCI P2PE 2B-4.1

What does 2B-4.1 require?

The application never encrypts clear-text account data itself or implements any encryption meant to replace or bypass the device firmware's approved SRED encryption, though it may add encryption on top of SRED-encrypted data.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 2: Application Security – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.