PCI P2PE
Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

PCI P2PE 6-6: PCI P2PE 6-6

What does 6-6 require?

Policy and procedures prevent clear-text private or secret keys, components or shares from crossing insecure channels: no dictation, voicemail, fax, e-mail or other electronic conveyance, no conveyance outside tamper-evident authenticable packaging, and no writing of values into startup instructions, onto or inside devices, or into procedure manuals.

Maintained by Gerard BlokdykControl text last updated

Other controls in Domain 5: P2PE Cryptographic Key Operations and Device Management – PCI P2PE

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.