PCI PIN Security
Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

PCI PIN Security 21-2.4: PCI PIN 21-2.4

What does 21-2.4 require?

Procedures ensure no custodian ever has, now or from past assignments, access to enough components or shares to reconstruct a key; in a two-of-three scheme a custodian may never have known two shares, and in a three-of-five scheme a custodian may hold two shares only if no other custodian's holdings combine with them to reach three.

Maintained by Gerard BlokdykControl text last updated

Other controls in Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll PCI PIN Security controls