Control Objective 5: Keys are used in a manner that prevents or detects their unauthorized usage – PCI PIN Security
PCI PIN Security 22-1.4: PCI PIN 22-1.4
What does 22-1.4 require?
A documented escalation process informs every organisation that shares or has ever shared the key, names the key personnel, assesses the damage with external help where needed, and sets out what is to be done about software, hardware, keys and encrypted data.