PCI PIN Security
Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

PCI PIN Security 20-4: PCI PIN 20-4

What does 20-4 require?

Any entity that injects or processes DUKPT keys or other derived keys segments its environments by using different BDKs for each financial institution; for each injection vendor, manufacturer or model; or for each sales unit, platform, market segment or region.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls