PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 5A-1.3: PCI P2PE 5A-1.3

What does 5A-1.3 require?

Documentation of the key-management solution's architecture, devices and protocols, set-up and operation exists and is in use for every key-management process, with an inventory of every key (type, level in the hierarchy, purpose, creation and distribution methods, storage media, destruction method) and a list of every device that generates keys or components (identifier, make and model, key types, location, approved key-generation function).

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.